Getting Data In

Not able to find REST endpoint for MySQL App to search the database

vickypandya
Engager

Hello,

I have been using REST for basic searching and getting results from saved searches from splunk via splunk SDK python. Recently I installed MySQL Connector App on my splunk instance. I am wondering if I could do a dbquery search on MySQL App via REST.

I haven't been able to find REST Endpoint to search on MySQL App. I was wondering if someone has already done it or if someone could point me to right direction.

Any help is much appreciated.

Thanks

Vikas

Tags (3)
1 Solution

jbsplunk
Splunk Employee
Splunk Employee

You can use the same REST endpoint that you use for regular Splunk searches - just change the search string to use mysqlquery instead

Regular search:
| search foobar | stats count 

dbquery search:
| mysqlquery spec=mydb query="SELECT * FROM foobar LIMIT 10"

Here's how you can use the REST endpoint to create searches
[http://docs.splunk.com/Documentation/Splunk/5.0/RESTAPI/RESTsearches]

View solution in original post

jbsplunk
Splunk Employee
Splunk Employee

You can use the same REST endpoint that you use for regular Splunk searches - just change the search string to use mysqlquery instead

Regular search:
| search foobar | stats count 

dbquery search:
| mysqlquery spec=mydb query="SELECT * FROM foobar LIMIT 10"

Here's how you can use the REST endpoint to create searches
[http://docs.splunk.com/Documentation/Splunk/5.0/RESTAPI/RESTsearches]

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Data Management Digest – August 2026

MichelleCorpora_1-1788182384472.png Welcome to the August 2026 edition of Data Management Digest! August was a ...

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...