connect splunk with rest api and get auto result update

[maulik29]

Hello , i am new splunk user, is it possible connect local API with splunk enterprise and get automated update of the results of rest api in splunk ? 

[isoutamo · Accepted solution]

If I understood your question correctly, this is possible. Probably best option is use token based authentication with those rest queries. You could found more from

• https://docs.splunk.com/Documentation/Splunk/8.0.5/RESTREF/RESTprolog
• https://docs.splunk.com/Documentation/Splunk/8.0.5/RESTUM/RESTusing
• https://docs.splunk.com/Documentation/Splunk/8.0.5/RESTTUT/RESTsearches
• https://docs.splunk.com/Documentation/Splunk/8.0.5/Security/UseAuthTokens

r. Ismo