Getting Data In

Pulling logged in users via REST API

hiddenkirby
Contributor

How would one get a list of all the users logged in via the API

In a ruby script i tried this... (POST seems odd for this type of thing) got the idea from http://www.splunk.com/base/Documentation/4.1/Developer/RESTCreateSearch

def list_users_logged_in
  xml = splunk_ssl_post_request("/services/authentication/httpauth-tokens", nil, {'authorization' => "Splunk #{session_key}"})
  puts xml
end

which obvs doesn't operate the same as the list_jobs

>> require 'splunk'
=> ["SplunkClient"]
>> client = SplunkClient.new
=> #<SplunkClient:0x7ff442d44fc0>
>> client.list_users_logged_in
<response>
<messages>
<msg type="ERROR">In handler &apos;&apos;: Cannot perform action &quot;POST&quot; without a target name to act on.</msg>
</messages>
</response>
=> nil

So obviously i'm missing something fundamental. Any help would be appreciated.

Tags (1)
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

You can just make a GET request to that URL to get a list of the tokens.

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

You can just make a GET request to that URL to get a list of the tokens.

hiddenkirby
Contributor
0 Karma

hiddenkirby
Contributor

where can i post example ruby code for others to see?

0 Karma

hiddenkirby
Contributor

lol thank you..

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...