Splunk REST APIs

[akshada_s]

Hi Team

I am new to Splunk and looking for a way to Fetch few metrics data from Splunk using Splunk REST API.
Can you please help me with right approach to implement the same?

I have explored 2 ways so far:
1. Using Search Job endpoints (Trying out this way is in-progress)
2. Using search queries within scripts

If you can help with pro's n cons of above methods, also if any other way which will be appropriate one, it would be helpful.
I am looking for best way to develop these APIs, so can get the result stored into files\database.

Any inputs would be really appreciated.

Thanks in advance!
Akshada

[VatsalJagani]

@akshada_s - If you are trying to run Splunk search from outside the script then jobs endpoint is usually the answer.

Find more info here - https://docs.splunk.com/Documentation/Splunk/9.1.1/RESTTUT/RESTsearches

I hope this helps!!!