Splunk Dev

How to configure REST input in Splunk Cloud?

abjuneja1
Engager

the target services exposes some REST APIs which allows the SIEM application to get the Audit and other Resources details.
The authentication mechanism is OAuth
This integration is supported in Splunk Enterprise, I want to check how it can be done in Splunk Cloud.

Tags (2)

jwsmith22
Explorer

I tried installing http://splunk-base.splunk.com/apps/90843/rest-api-modular-input manually, but it was rejected.

Since this has been asked here, I may create a ticket and see what they say.

0 Karma

p_gurav
Champion

Hi,

I am not sure about REST input. But you can try using HTTP Event Collector. Refer below documents:
http://docs.splunk.com/Documentation/SplunkCloud/7.0.0/Data/AboutHEC

0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...