Splunk Dev

How to access Rest API via C# application?

robertpurpose
Explorer

I have a local access to Splunk on my system and I am seeking out means of accessing the API via a C# application. I noticed there was some documentation but no clear direction on data definition or additional routes to accessing the data. Could I get some help with this?

Labels (1)
Tags (2)
0 Karma

robertpurpose
Explorer

I am guessing the only way to retrieve data from Splunk would be through the SDK? In my case downloaded "The Splunk PCL Client" from Nuget Packages. I cannot find that package for some reason and tried the others which did not download. Additional information, I am using .NET6  and on Splunk Enterprise. I am trying to do is download live data or logs from the dashboard, is that possible without downloading the packages?

Is there an easier means of accessing Enterprise via username, password, and data I would like to download? I think the closest I came to this is here: https://docs.splunk.com/Documentation/Splunk/8.2.5/RESTUM/RESTusing#Encrypt_REST_API_requests

Any help is appreciated and thank you so much so far for your patience. 

0 Karma

robertpurpose
Explorer

I am just seeing this documentation and will start reading and testing. Thank you @SanjayReddy  

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @robertpurpose 

have you already gone through the  follwing documentation     

https://github.com/splunk/splunk-sdk-csharp 

https://dev.splunk.com/enterprise/docs/devtools/csharp/sdk-csharp/

FYI 

for accessing REST API In SDK 

please use either   https://localhost:8089 OR http://localhost:8089 

0 Karma

robertpurpose
Explorer

@SanjayReddy  I am guessing the only way to retrieve data from Splunk would be through the SDK? In my case downloaded "The Splunk PCL Client" from Nuget Packages. I cannot find that package for some reason and tried the others which did not download. Additional information, I am using .NET6  and on Splunk Enterprise. I am trying to do is download live data or logs from the dashboard, is that possible without downloading the packages?

Is there an easier means of accessing Enterprise via username, password, and data I would like to download? I think the closest I came to this is here: https://docs.splunk.com/Documentation/Splunk/8.2.5/RESTUM/RESTusing#Encrypt_REST_API_requests

Any help is appreciated and thank you so much so far for your patience. 

0 Karma
Get Updates on the Splunk Community!

Splunk Classroom Chronicles: Training Tales and Testimonials

Welcome to the "Splunk Classroom Chronicles" series, created to help curious, career-minded learners get ...

Access Tokens Page - New & Improved

Splunk Observability Cloud recently launched an improved design for the access tokens page for better ...

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

🍂 Fall into November with a fresh lineup of Community Office Hours, Tech Talks, and Webinars we’ve ...