Getting Data In

Is there a way for Splunk to Call Third Party REST APIs Dynamically?

premrajvs
Explorer

Requirement : Call REST APIs and ingest the data into Splunk to specified indexes

As of now, we are using Splunk Add on Builder Application to create apps for REST API calls and importing the data into Splunk.

Limitation with this approach : We are not able to call an API dynamically  or on ad-hoc basis only when needed. Team wants to have an UI to call the REST APIs dynamically and show this data into a dashboard.

Is there any way in Splunk to provide this capability ?

Labels (1)
0 Karma
1 Solution

premrajvs
Explorer

I think there is no app available to call APIs on adhoc basis. So, I am building my own custom app.

View solution in original post

bowesmana
SplunkTrust
SplunkTrust

Yes, you can use curl as part of SPL with this app

https://splunkbase.splunk.com/app/4146

 

0 Karma

premrajvs
Explorer

I think there is no app available to call APIs on adhoc basis. So, I am building my own custom app.

richgalloway
SplunkTrust
SplunkTrust

Have you looked at the REST API Modular Input app (https://splunkbase.splunk.com/app/1546)?  It's not truly ad-hoc, but is more so than building code with AoB.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...