Getting Data In

REST API storage/collections/config return errors

yuanliu
SplunkTrust
SplunkTrust

I have a hard time getting examples in https://dev.splunk.com/enterprise/docs/developapps/manageknowledge/kvstore/usetherestapitomanagekv/ to work.  One of the most obvious error is 405 with POST to storage/collections/config:

 

 

 

HTTP/1.1 405 Method Not Allowed
Date: Sun, 13 Jun 2021 16:27:53 GMT
Allow: GET,HEAD,OPTIONS
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Content-Length: 243
Connection: Keep-Alive
X-Frame-Options: SAMEORIGIN
Server: Splunkd

 

 

 

 

The documentation clearly says 

storage/collections/config
  • GET: Get a list of collections in a specific app.
  • POST: Create a new collection in a specific app.

GET method, meanwhile, always gets 404 page not found. Is there some permission to be set before API can enable POST and allow GET?

0 Karma

venkatasri
SplunkTrust
SplunkTrust

Hi @yuanliu 

Can you share the API endpoint that you are using and how you are testing it?

0 Karma

yuanliu
SplunkTrust
SplunkTrust

@venkatasri I use curl.  To test POST method, I use something like

curl -k -H 'Authorization Bearer <token>' \
    -d name=kvtest \    https://localhost:8089/servicesNS/myuser/search/storage/collections/config

nearly verbatim as in the document.  To test GET method,  just drop the -d option.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Self-Healing Pipeline Is Now Generally Available: AI-Powered CIM Compliance

Maintaining data integrity across security and analytics pipelines is an ongoing challenge. Data ...

Meet Splunk Observability Studio: AI-Assisted OpenTelemetry Instrumentation Without ...

Instrumentation is usually the last step or even an afterthought when building out a project. The feature ...

Federated Search for Cisco Security and Analytics Logging (SAL) is now GA on Splunk ...

Federated Search for Cisco  Security Analytics and Logging (SAL) is now generally available as part of the ...