Getting Data In

oneshot POST message body

kevintelford
Path Finder

Is there a way to specify parameters in a POST to the oneshot endpoint? I can successfully add files -

curl -k -u admin:changeme -d
'name=/path/to/my/file'
https://localhost:8089/services/data/input/oneshot

But I am not able to add any other optional parameters such as host, index, etc. I've also tried doing a JSON POST with no luck. Anytime I add additional parameters it complains about not having a regular file.

Thanks,
Kevin

Tags (4)

ykys97
Explorer

Try this

(first create an index 'test_index')

curl -k -u admin:changeme -d "name=/path/to/myfile" -d "index=test_index" -d "sourcetype=test_source" https://localhost:8089/services/data/inputs/oneshot

Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...