Splunk Dev

How to access Rest API via C# application?

robertpurpose
Explorer

I have a local access to Splunk on my system and I am seeking out means of accessing the API via a C# application. I noticed there was some documentation but no clear direction on data definition or additional routes to accessing the data. Could I get some help with this?

Labels (1)
Tags (2)
0 Karma

robertpurpose
Explorer

I am guessing the only way to retrieve data from Splunk would be through the SDK? In my case downloaded "The Splunk PCL Client" from Nuget Packages. I cannot find that package for some reason and tried the others which did not download. Additional information, I am using .NET6  and on Splunk Enterprise. I am trying to do is download live data or logs from the dashboard, is that possible without downloading the packages?

Is there an easier means of accessing Enterprise via username, password, and data I would like to download? I think the closest I came to this is here: https://docs.splunk.com/Documentation/Splunk/8.2.5/RESTUM/RESTusing#Encrypt_REST_API_requests

Any help is appreciated and thank you so much so far for your patience. 

0 Karma

robertpurpose
Explorer

I am just seeing this documentation and will start reading and testing. Thank you @SanjayReddy  

0 Karma

SanjayReddy
SplunkTrust
SplunkTrust

Hi @robertpurpose 

have you already gone through the  follwing documentation     

https://github.com/splunk/splunk-sdk-csharp 

https://dev.splunk.com/enterprise/docs/devtools/csharp/sdk-csharp/

FYI 

for accessing REST API In SDK 

please use either   https://localhost:8089 OR http://localhost:8089 

0 Karma

robertpurpose
Explorer

@SanjayReddy  I am guessing the only way to retrieve data from Splunk would be through the SDK? In my case downloaded "The Splunk PCL Client" from Nuget Packages. I cannot find that package for some reason and tried the others which did not download. Additional information, I am using .NET6  and on Splunk Enterprise. I am trying to do is download live data or logs from the dashboard, is that possible without downloading the packages?

Is there an easier means of accessing Enterprise via username, password, and data I would like to download? I think the closest I came to this is here: https://docs.splunk.com/Documentation/Splunk/8.2.5/RESTUM/RESTusing#Encrypt_REST_API_requests

Any help is appreciated and thank you so much so far for your patience. 

0 Karma
Get Updates on the Splunk Community!

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...