We're investigating Splunk as a logging solution. We've got the Cloud Trial and we're trying to test the REST API. We've been at it for some time, but I haven't been able to find a way to get it to work, because there's always an authentication challenge. Is this the expected behavior? We can't use the API without a full license?
Thanks
Paul
Hey tamalunp,
You appear to be correct.
Splunk Cloud supports the same REST endpoints as Splunk Enterprise. For details about REST endpoints, refer to the Splunk Enterprise REST API Reference Manual. To use the REST API, you must have a paid subscription to Splunk Cloud.
https://docs.splunk.com/Documentation/SplunkCloud/6.5.0/User/RESTAPIaccess
Why don't you try reaching out to your local Splunk sales team? I'm sure they can help you with what you need to explore.
Hey tamalunp,
You appear to be correct.
Splunk Cloud supports the same REST endpoints as Splunk Enterprise. For details about REST endpoints, refer to the Splunk Enterprise REST API Reference Manual. To use the REST API, you must have a paid subscription to Splunk Cloud.
https://docs.splunk.com/Documentation/SplunkCloud/6.5.0/User/RESTAPIaccess
Why don't you try reaching out to your local Splunk sales team? I'm sure they can help you with what you need to explore.
I accept this, but I'm very disappointed with Splunk. 😞
The 15 day free trial does expose the API. Its sitting on a different URL.
Put an input- infront of your instance name..
i.e.
root@Blue10:~# telnet input-prd-p-mt4lbmbctrhk.cloud.splunk.com 8089
Trying 54.90.67.167...
Connected to input-prd-p-mt4lbmbctrhk.cloud.splunk.com.
Escape character is '^]'.
I just confirmed that the Cloud Trial edition does not support the REST API in this post: https://answers.splunk.com/answers/665067/401-unauthorized-rest-api-splunk-cloud-trial.html
When I try this, I get: "Operation timed out" and "Unable to connect to remote host"