Getting Data In

Is using REST API not allowed with Splunk Cloud Trial?

tamalunp
Engager

We're investigating Splunk as a logging solution. We've got the Cloud Trial and we're trying to test the REST API. We've been at it for some time, but I haven't been able to find a way to get it to work, because there's always an authentication challenge. Is this the expected behavior? We can't use the API without a full license?
Thanks
Paul

1 Solution

ktugwell_splunk
Splunk Employee
Splunk Employee

Hey tamalunp,

You appear to be correct.

Splunk Cloud supports the same REST endpoints as Splunk Enterprise. For details about REST endpoints, refer to the Splunk Enterprise REST API Reference Manual. To use the REST API, you must have a paid subscription to Splunk Cloud.

https://docs.splunk.com/Documentation/SplunkCloud/6.5.0/User/RESTAPIaccess

Why don't you try reaching out to your local Splunk sales team? I'm sure they can help you with what you need to explore.

View solution in original post

ktugwell_splunk
Splunk Employee
Splunk Employee

Hey tamalunp,

You appear to be correct.

Splunk Cloud supports the same REST endpoints as Splunk Enterprise. For details about REST endpoints, refer to the Splunk Enterprise REST API Reference Manual. To use the REST API, you must have a paid subscription to Splunk Cloud.

https://docs.splunk.com/Documentation/SplunkCloud/6.5.0/User/RESTAPIaccess

Why don't you try reaching out to your local Splunk sales team? I'm sure they can help you with what you need to explore.

tamalunp
Engager

I accept this, but I'm very disappointed with Splunk. 😞

0 Karma

khourihan_splun
Splunk Employee
Splunk Employee

The 15 day free trial does expose the API. Its sitting on a different URL.

Put an input- infront of your instance name..

i.e.

root@Blue10:~# telnet input-prd-p-mt4lbmbctrhk.cloud.splunk.com 8089
Trying 54.90.67.167...
Connected to input-prd-p-mt4lbmbctrhk.cloud.splunk.com.
Escape character is '^]'.

0 Karma

grokify
Explorer

I just confirmed that the Cloud Trial edition does not support the REST API in this post: https://answers.splunk.com/answers/665067/401-unauthorized-rest-api-splunk-cloud-trial.html

0 Karma

grokify
Explorer

When I try this, I get: "Operation timed out" and "Unable to connect to remote host"

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) v3.54.0

The Splunk Threat Research Team (STRT) recently released Enterprise Security Content Update (ESCU) v3.54.0 and ...

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

New Learning Videos on Topics Most Requested by You! Plus This Month’s New Splunk ...

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...