Monitoring Splunk

Call External REST URL from search

premraj_vs
Path Finder

I know that we can use REST Modular Input to call REST API and get the results in JSON format in Splunk. But, my requirement is different.
I want to make a rest call directly in Splunk search. is this possible ? If yes, can someone give any pointers ?

Tags (1)
0 Karma

dwaddle
SplunkTrust
SplunkTrust

Do you want the REST API call to originate from the user's browser? Remember dashboards can have javascript and that javascript can do anything that the cross-origin policy allows. Sometimes cross-origin policy makes it just too difficult to call 3rd party APIs directly from the browser though.

You can always build your own custom search command. The user (or the dashboard they are viewing) makes a call to | callmyrestapi which runs a python script on the search head that does the needful.

There is already an app, https://splunkbase.splunk.com/app/4172/, that provides a very generic |curl custom search command. This may be enough to do what you need.

premraj_vs
Path Finder

Thank you. Will check this

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...