Knowledge Management

Splunk REST APIs

akshada_s
New Member

Hi Team

I am new to Splunk and looking for a way to Fetch few metrics data from Splunk using Splunk REST API.
Can you please help me with right approach to implement the same?

I have explored 2 ways so far:
1. Using Search Job endpoints (Trying out this way is in-progress)
2. Using search queries within scripts

If you can help with pro's n cons of above methods, also if any other way which will be appropriate one, it would be helpful.
I am looking for best way to develop these APIs, so can get the result stored into files\database.

Any inputs would be really appreciated.

Thanks in advance!
Akshada

 

Labels (1)
0 Karma

VatsalJagani
SplunkTrust
SplunkTrust

@akshada_s - If you are trying to run Splunk search from outside the script then jobs endpoint is usually the answer.

Find more info here - https://docs.splunk.com/Documentation/Splunk/9.1.1/RESTTUT/RESTsearches

 

I hope this helps!!!

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

WATCH NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If exploited, ...

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...