Getting Data In

Pulling logged in users via REST API

hiddenkirby
Contributor

How would one get a list of all the users logged in via the API

In a ruby script i tried this... (POST seems odd for this type of thing) got the idea from http://www.splunk.com/base/Documentation/4.1/Developer/RESTCreateSearch

def list_users_logged_in
  xml = splunk_ssl_post_request("/services/authentication/httpauth-tokens", nil, {'authorization' => "Splunk #{session_key}"})
  puts xml
end

which obvs doesn't operate the same as the list_jobs

>> require 'splunk'
=> ["SplunkClient"]
>> client = SplunkClient.new
=> #<SplunkClient:0x7ff442d44fc0>
>> client.list_users_logged_in
<response>
<messages>
<msg type="ERROR">In handler &apos;&apos;: Cannot perform action &quot;POST&quot; without a target name to act on.</msg>
</messages>
</response>
=> nil

So obviously i'm missing something fundamental. Any help would be appreciated.

Tags (1)
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

You can just make a GET request to that URL to get a list of the tokens.

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

You can just make a GET request to that URL to get a list of the tokens.

hiddenkirby
Contributor
0 Karma

hiddenkirby
Contributor

where can i post example ruby code for others to see?

0 Karma

hiddenkirby
Contributor

lol thank you..

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security: Your Command Center for PCI DSS Compliance

Every security professional knows the drill. The PCI DSS audit is approaching, and suddenly everyone's asking ...

Developer Spotlight with Guilhem Marchand

From Splunk Engineer to Founder: The Journey Behind TrackMe    After spending over 12 years working full time ...

Cisco Catalyst Center Meets Splunk ITSI: From 'Payments Are Down' to Root Cause in ...

The Problem: When Networks and Services Don't Talk Payment systems fail at a retail location. Customers are ...