Getting Data In

how to use rest api to get aggregated data from splunk?

New Member

hello
I want to sent in splunk this request and get aggregated data
search index=_intenal earliest=-2h@h http_status="200" OR http_status="204" | fields request_time http_status dc

but for ruby-sdk it return
"\n \n"
for curl request return a lot raw data.
it is possible for rest api ?
how can i use it ?

0 Karma

Builder

yes you can use sdk like in python

http://dev.splunk.com/view/python-sdk/SP-CAAAEE5

0 Karma

New Member

I use ruby-sdk and curl for direct api requests.
it is not working.
do you think python sdk prived something new ?

0 Karma