Getting Data In

Sending HTTP DELETE request using splunk's 'rest' command

paramagurukarth
Builder

Please let me know if there any way to send a HTTP request to splunk REST end point using splunk's rest (http://docs.splunk.com/Documentation/Splunk/6.2.2/SearchReference/Rest) command with HTTP DELETE method

Tags (2)
0 Karma

paramagurukarth
Builder

Splunk REST will return xml in ODATA format...
For example, https://localhost:8089/servicesNS/-/search/saved/searches

This search will return list of saved searches..
One **** tag for each saved searches
Each entry tag contains child tags **** (More than one) , these tag contains URLs related to that particular saved search and the relation is defined by the attribute "rel"..
Pick the one with "rel" as "remove" and send a ajax request with http_method DELETE or use any REST Clients (Post Man REST client plugin for chrome).. you can remove it

0 Karma

gwobben
Communicator

The rest command in Splunk can only do GET requests

Patient
Path Finder

Hi,
If I've understood what you need, I will like to let You know that you can set this stanza [:] in the restmap.conf.spec file. Applicable to all REST stanzas
Stanza definitions below may supply additional information for these.

   [<rest endpoint name>:<endpoint description string>]
 * match=<path> to  Specify the URI that calls the handler.
 * capability.<post|delete|get|put>=<capabilityName>
 * Depending on the HTTP method, check capabilitieson the authenticated session user.
 * If you use 'capability.post|delete|get|put,' then the associated
   method is checked

`

0 Karma

gwobben
Communicator

I downvoted this post because not related to the question

0 Karma
Get Updates on the Splunk Community!

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

  Now On Demand  Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...