Getting Data In

Is using REST API not allowed with Splunk Cloud Trial?

tamalunp
Explorer

We're investigating Splunk as a logging solution. We've got the Cloud Trial and we're trying to test the REST API. We've been at it for some time, but I haven't been able to find a way to get it to work, because there's always an authentication challenge. Is this the expected behavior? We can't use the API without a full license?
Thanks
Paul

1 Solution

ktugwell_splunk
Splunk Employee
Splunk Employee

Hey tamalunp,

You appear to be correct.

Splunk Cloud supports the same REST endpoints as Splunk Enterprise. For details about REST endpoints, refer to the Splunk Enterprise REST API Reference Manual. To use the REST API, you must have a paid subscription to Splunk Cloud.

https://docs.splunk.com/Documentation/SplunkCloud/6.5.0/User/RESTAPIaccess

Why don't you try reaching out to your local Splunk sales team? I'm sure they can help you with what you need to explore.

View solution in original post

ktugwell_splunk
Splunk Employee
Splunk Employee

Hey tamalunp,

You appear to be correct.

Splunk Cloud supports the same REST endpoints as Splunk Enterprise. For details about REST endpoints, refer to the Splunk Enterprise REST API Reference Manual. To use the REST API, you must have a paid subscription to Splunk Cloud.

https://docs.splunk.com/Documentation/SplunkCloud/6.5.0/User/RESTAPIaccess

Why don't you try reaching out to your local Splunk sales team? I'm sure they can help you with what you need to explore.

tamalunp
Explorer

I accept this, but I'm very disappointed with Splunk. 😞

0 Karma

khourihan_splun
Splunk Employee
Splunk Employee

The 15 day free trial does expose the API. Its sitting on a different URL.

Put an input- infront of your instance name..

i.e.

root@Blue10:~# telnet input-prd-p-mt4lbmbctrhk.cloud.splunk.com 8089
Trying 54.90.67.167...
Connected to input-prd-p-mt4lbmbctrhk.cloud.splunk.com.
Escape character is '^]'.

0 Karma

grokify
Explorer

I just confirmed that the Cloud Trial edition does not support the REST API in this post: https://answers.splunk.com/answers/665067/401-unauthorized-rest-api-splunk-cloud-trial.html

0 Karma

grokify
Explorer

When I try this, I get: "Operation timed out" and "Unable to connect to remote host"

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...