I want to sent in splunk this request and get aggregated data
search index=_intenal earliest=-2h@h http_status="200" OR http_status="204" | fields request_time http_status dc
but for ruby-sdk it return
for curl request return a lot raw data.
it is possible for rest api ?
how can i use it ?
yes you can use sdk like in python
I use ruby-sdk and curl for direct api requests.
it is not working.
do you think python sdk prived something new ?