Getting Data In

Not able to find REST endpoint for MySQL App to search the database

vickypandya
Engager

Hello,

I have been using REST for basic searching and getting results from saved searches from splunk via splunk SDK python. Recently I installed MySQL Connector App on my splunk instance. I am wondering if I could do a dbquery search on MySQL App via REST.

I haven't been able to find REST Endpoint to search on MySQL App. I was wondering if someone has already done it or if someone could point me to right direction.

Any help is much appreciated.

Thanks

Vikas

Tags (3)
1 Solution

jbsplunk
Splunk Employee
Splunk Employee

You can use the same REST endpoint that you use for regular Splunk searches - just change the search string to use mysqlquery instead

Regular search:
| search foobar | stats count 

dbquery search:
| mysqlquery spec=mydb query="SELECT * FROM foobar LIMIT 10"

Here's how you can use the REST endpoint to create searches
[http://docs.splunk.com/Documentation/Splunk/5.0/RESTAPI/RESTsearches]

View solution in original post

jbsplunk
Splunk Employee
Splunk Employee

You can use the same REST endpoint that you use for regular Splunk searches - just change the search string to use mysqlquery instead

Regular search:
| search foobar | stats count 

dbquery search:
| mysqlquery spec=mydb query="SELECT * FROM foobar LIMIT 10"

Here's how you can use the REST endpoint to create searches
[http://docs.splunk.com/Documentation/Splunk/5.0/RESTAPI/RESTsearches]

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

In cybersecurity, defenders respond to threats. Architects design the systems that stop them.    As ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...