Getting Data In

Not able to find REST endpoint for MySQL App to search the database

vickypandya
Engager

Hello,

I have been using REST for basic searching and getting results from saved searches from splunk via splunk SDK python. Recently I installed MySQL Connector App on my splunk instance. I am wondering if I could do a dbquery search on MySQL App via REST.

I haven't been able to find REST Endpoint to search on MySQL App. I was wondering if someone has already done it or if someone could point me to right direction.

Any help is much appreciated.

Thanks

Vikas

Tags (3)
1 Solution

jbsplunk
Splunk Employee
Splunk Employee

You can use the same REST endpoint that you use for regular Splunk searches - just change the search string to use mysqlquery instead

Regular search:
| search foobar | stats count 

dbquery search:
| mysqlquery spec=mydb query="SELECT * FROM foobar LIMIT 10"

Here's how you can use the REST endpoint to create searches
[http://docs.splunk.com/Documentation/Splunk/5.0/RESTAPI/RESTsearches]

View solution in original post

jbsplunk
Splunk Employee
Splunk Employee

You can use the same REST endpoint that you use for regular Splunk searches - just change the search string to use mysqlquery instead

Regular search:
| search foobar | stats count 

dbquery search:
| mysqlquery spec=mydb query="SELECT * FROM foobar LIMIT 10"

Here's how you can use the REST endpoint to create searches
[http://docs.splunk.com/Documentation/Splunk/5.0/RESTAPI/RESTsearches]

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Unlocking Unified Insights: New Gigamon Federated Search App for Splunk

In today’s data-heavy environment, organizations are caught in a data distribution dilemma. As data volumes ...

GA: New Data Management App in Splunk Platform

Streamlining Data Management: Introducing a unified experience in Splunk Managing data at scale shouldn’t feel ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...