How to search Splunk from external web application?

[stwong]

Hi, we've a simple web application in PHP that queries user's status from different sources (e.g. LDAP, Oracle DB, etc.). Possible to search Splunk by passing arguments like username, time selector, etc. to a predefined report, and gives result in html ?

Sorry for the newbie question. Thanks.

/stwong

[niketn · Accepted solution]

@stwong there are several options:

1) Embedded Scheduled reports : https://docs.splunk.com/Documentation/Splunk/7.2.6/Report/Embedscheduledreports

2) Splunk component in your web page using SplunkJS: http://dev.splunk.com/view/webframework-developapps/SP-CAAAEWR

3) Splunk Developer Cloud (beta introduced at .conf 2018): https://www.splunk.com/blog/2018/10/03/new-for-developers-splunk-developer-cloud-more.html

[stwong]

Seems 2) suits our need while 1) doesn't accept parameter passing from the external web to the report.

Thanks for your help.

[stwong]

seems need to put plaintext Splunk username/password in SplunkJS configurations.