Splunk Search

How to get data through REST API into SPLUNK APP

emily12234
Explorer

Hi

We have to retrieve DATA through REST API and then display the data in the dashboard.

After reading documents, the add-on is an easy method to get data into Splunk. But no dashboard for add-on.

Can I combine the add-on into APP? Add-on: get data, APP: display the data?

 

Regards

Emily 

 

Labels (1)
0 Karma
1 Solution

Vardhan
Contributor

Hi,

The best way is to create a separate app for dashboards and deploy it in only search heads.And you can deploy your addon in indexers for parsing activity.

View solution in original post

0 Karma

Vardhan
Contributor

Hi,

The best way is to create a separate app for dashboards and deploy it in only search heads.And you can deploy your addon in indexers for parsing activity.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...