Search results send as HTTP POST automatically

[ryastrebov]

Hello!
It is possible to make in search request?

Thank you!

[Neeraj_Luthra · Accepted solution]

Please be more specific. It is the exact same question as you posted yesterday - http://splunk-base.splunk.com/answers/81924/send-search-result-as-http-post.

[ryastrebov]

Thank you for your help!

[Damien_Dallimor]

If you browse around the link I already sent , you can find code examples for various different languages for searching in Splunk.
And then depending on the language you are using , there a numerous examples available online for how to perform an HTTP POST, simple python example :

import httplib, urllib
params = urllib.urlencode({
'field1' : 'foo',
'field2' : 'goo'
})
headers = {
"Content-type": "application/x-www-form-urlencoded",
"Accept": "text/plain"
}
conn = httplib.HTTPConnection("somehost.com:80")
conn.request("POST", "/hello/world",params, headers)
conn.close()

[ryastrebov]

Thank you!
And where I can see examples of scripts to send search results as HTTP POST?

[Damien_Dallimor]

Workflow actions will present a link that you can manually click on in the Splunk UI.
For something completely automated I'd consider looking at one of our language SDKs (http://dev.splunk.com/view/sdks/SP-CAAADP7) to develop a custom integration to Splunk. It would be quite simple, your program could just periodically execute a Splunk search and depending on your results criteria , HTTP POST them somewhere.

[ryastrebov]

These links offer yesterday to create a workflow. If I understand correctly, the workflow can be started manually. Necessary to send the results of the search going on-line, automatically. One approach - writing the script. I thought that there is any way to do this without a script. It is possible?