Splunk Dev

How to connect to and query data from Splunk instance in an external React application

kackerman7
Loves-to-Learn

Hello,

I am currently working on building out a GUI for the software I work on and am looking for a way to query data from our Splunk instance to use in our front-end. I have looked at the documentation here Splunk Design System as well as some code examples here GitHub - splunk/react_search_example, but I cannot find a straight forward answer for how to hook into our Splunk instance and query data from it. From the documentation and examples it seems like what I am trying to is definitely possible, I just can't figure out how. 

Any help is greatly appreciated.

Kevin

0 Karma

kamlesh_vaghela
SplunkTrust
SplunkTrust

Hello @kackerman7 

I'm sharing the POC details I worked on a few years ago. If you are using client-server architecture for your External React Application, I suggest checking my architecture which easily integrates with your existing architecture.

 

Screenshot 2024-06-14 at 11.14.06 AM.png

Just go through it, try it in your local lab, and let me know if you need more help. 

 

I hope this will help you.

Thanks
KV
An upvote would be appreciated if any of my replies help you solve the problem or gain knowledge.

 

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...