Monitoring Splunk

Does Splunk offer any such solution to make a call to SOAP-REST-HTTP URL and to test their availability?

Path Finder

Does Splunk offer any such solution to make a call to SOAP-REST-HTTP URL and to test their availability?

0 Karma
1 Solution

SplunkTrust
SplunkTrust

I'm assuming you want the ability to consume logs, set a Splunk alert on a keyword, then send a SOAP call to verify the web service is good if that alert fires?

You could always create a script to fire on that alert which will do a cURL and send that web service call. If I'm correct then I can help you set this up

http://docs.splunk.com/Documentation/Splunk/6.1.1/RESTAPI/RESTinput#receivers.2Fsimple

View solution in original post

SplunkTrust
SplunkTrust

Website monitoring (not an official Splunk app) does http testing, you could always enhance it to perform other kinds of connections if required...

The REST API modular input app, also not an official Splunk app can perform REST calls to retrieve data so this might also be relevant if you are looking for something pre-built...

0 Karma

SplunkTrust
SplunkTrust

I'm assuming you want the ability to consume logs, set a Splunk alert on a keyword, then send a SOAP call to verify the web service is good if that alert fires?

You could always create a script to fire on that alert which will do a cURL and send that web service call. If I'm correct then I can help you set this up

http://docs.splunk.com/Documentation/Splunk/6.1.1/RESTAPI/RESTinput#receivers.2Fsimple

View solution in original post

Path Finder

yeah, you got it. please guide me to set up that, that would be really helpful. We are using enterprise splunk.

0 Karma

SplunkTrust
SplunkTrust

Sure, this weekend I will give you a working example and help implement it

0 Karma

SplunkTrust
SplunkTrust

Assuming your running a single indexer on a Linux server, you will first create a an XML file and will reference this in your script. So for example, you have an XML file called request.xml and place it under /opt/websvc/requests. You will then create a script which will look like this (below), we will call it websvc_call.sh

cd /opt/websvc/requests
curl -X POST -H "Content-Type: text/xml" -H  --data-binary @request.xml http://xxx.xx.xx.xxx/YOUR/ENDPOINT.svc

You will save this script to SPLUNK_HOME/bin/scripts/websvc_call.sh

You will then go into the Splunk UI, find the text you want to alert on, save as an alert, then Trigger Actions, select Execute a Script and enter the script name and save. This will send a web service call if text appears.. If you want to go further, you could have it respond back and have Splunk consume it and provide you with an alert or dashboard

0 Karma

Path Finder

Think you need to clarify what you mean by 'SOAP-REST-HTTP' as you've just named three different protocols. Are you asking how to test if splunk is running on a machine?

0 Karma

Path Finder

SOAP-REST-HTTP - I meant test application/service via SOAP or REST endpoint or via httpclient. Can we script and schedule search/alert with in splunk.

0 Karma
State of Splunk Careers

Access the Splunk Careers Report to see real data that shows how Splunk mastery increases your value and job satisfaction.

Find out what your skills are worth!