Getting Data In

Not able to find REST endpoint for MySQL App to search the database

vickypandya
Engager

Hello,

I have been using REST for basic searching and getting results from saved searches from splunk via splunk SDK python. Recently I installed MySQL Connector App on my splunk instance. I am wondering if I could do a dbquery search on MySQL App via REST.

I haven't been able to find REST Endpoint to search on MySQL App. I was wondering if someone has already done it or if someone could point me to right direction.

Any help is much appreciated.

Thanks

Vikas

Tags (3)
1 Solution

jbsplunk
Splunk Employee
Splunk Employee

You can use the same REST endpoint that you use for regular Splunk searches - just change the search string to use mysqlquery instead

Regular search:
| search foobar | stats count 

dbquery search:
| mysqlquery spec=mydb query="SELECT * FROM foobar LIMIT 10"

Here's how you can use the REST endpoint to create searches
[http://docs.splunk.com/Documentation/Splunk/5.0/RESTAPI/RESTsearches]

View solution in original post

jbsplunk
Splunk Employee
Splunk Employee

You can use the same REST endpoint that you use for regular Splunk searches - just change the search string to use mysqlquery instead

Regular search:
| search foobar | stats count 

dbquery search:
| mysqlquery spec=mydb query="SELECT * FROM foobar LIMIT 10"

Here's how you can use the REST endpoint to create searches
[http://docs.splunk.com/Documentation/Splunk/5.0/RESTAPI/RESTsearches]

Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...