Getting Data In

Pulling logged in users via REST API

hiddenkirby
Contributor

How would one get a list of all the users logged in via the API

In a ruby script i tried this... (POST seems odd for this type of thing) got the idea from http://www.splunk.com/base/Documentation/4.1/Developer/RESTCreateSearch

def list_users_logged_in
  xml = splunk_ssl_post_request("/services/authentication/httpauth-tokens", nil, {'authorization' => "Splunk #{session_key}"})
  puts xml
end

which obvs doesn't operate the same as the list_jobs

>> require 'splunk'
=> ["SplunkClient"]
>> client = SplunkClient.new
=> #<SplunkClient:0x7ff442d44fc0>
>> client.list_users_logged_in
<response>
<messages>
<msg type="ERROR">In handler &apos;&apos;: Cannot perform action &quot;POST&quot; without a target name to act on.</msg>
</messages>
</response>
=> nil

So obviously i'm missing something fundamental. Any help would be appreciated.

Tags (1)
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

You can just make a GET request to that URL to get a list of the tokens.

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

You can just make a GET request to that URL to get a list of the tokens.

hiddenkirby
Contributor
0 Karma

hiddenkirby
Contributor

where can i post example ruby code for others to see?

0 Karma

hiddenkirby
Contributor

lol thank you..

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Introducing ITSI 5.0: Unified Visibility and Actionable Insights

Introducing ITSI 5.0: Unified Visibility and Actionable Insights Tuesday, July 21, 2026  |  10:00AM PT / ...

Inside Splunk Agent Observability: Understanding Agent Behavior, Tokens & Costs

Inside Splunk Agent Observability:Understanding Agent Behavior, Tokens & Costs Thursday, August 06, ...

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...