Getting Data In

Sending HTTP DELETE request using splunk's 'rest' command


Please let me know if there any way to send a HTTP request to splunk REST end point using splunk's rest ( command with HTTP DELETE method

Tags (2)
0 Karma


Splunk REST will return xml in ODATA format...
For example, https://localhost:8089/servicesNS/-/search/saved/searches

This search will return list of saved searches..
One **** tag for each saved searches
Each entry tag contains child tags **** (More than one) , these tag contains URLs related to that particular saved search and the relation is defined by the attribute "rel"..
Pick the one with "rel" as "remove" and send a ajax request with http_method DELETE or use any REST Clients (Post Man REST client plugin for chrome).. you can remove it

0 Karma


The rest command in Splunk can only do GET requests

Path Finder

If I've understood what you need, I will like to let You know that you can set this stanza [:] in the restmap.conf.spec file. Applicable to all REST stanzas
Stanza definitions below may supply additional information for these.

   [<rest endpoint name>:<endpoint description string>]
 * match=<path> to  Specify the URI that calls the handler.
 * capability.<post|delete|get|put>=<capabilityName>
 * Depending on the HTTP method, check capabilitieson the authenticated session user.
 * If you use '|delete|get|put,' then the associated
   method is checked


0 Karma


I downvoted this post because not related to the question

0 Karma
Get Updates on the Splunk Community!

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...

Cloud Platform | Migrating your Splunk Cloud deployment to Python 3.7

Python 2.7, the last release of Python 2, reached End of Life back on January 1, 2020. As part of our larger ...