Splunk Search

How to search Splunk from external web application?

stwong
Communicator

Hi, we've a simple web application in PHP that queries user's status from different sources (e.g. LDAP, Oracle DB, etc.). Possible to search Splunk by passing arguments like username, time selector, etc. to a predefined report, and gives result in html ?

Sorry for the newbie question. Thanks.

/stwong

0 Karma
1 Solution

niketn
Legend

@stwong there are several options:

1) Embedded Scheduled reports : https://docs.splunk.com/Documentation/Splunk/7.2.6/Report/Embedscheduledreports

2) Splunk component in your web page using SplunkJS: http://dev.splunk.com/view/webframework-developapps/SP-CAAAEWR

3) Splunk Developer Cloud (beta introduced at .conf 2018): https://www.splunk.com/blog/2018/10/03/new-for-developers-splunk-developer-cloud-more.html

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

niketn
Legend

@stwong there are several options:

1) Embedded Scheduled reports : https://docs.splunk.com/Documentation/Splunk/7.2.6/Report/Embedscheduledreports

2) Splunk component in your web page using SplunkJS: http://dev.splunk.com/view/webframework-developapps/SP-CAAAEWR

3) Splunk Developer Cloud (beta introduced at .conf 2018): https://www.splunk.com/blog/2018/10/03/new-for-developers-splunk-developer-cloud-more.html

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

stwong
Communicator

Seems 2) suits our need while 1) doesn't accept parameter passing from the external web to the report.

Thanks for your help.

0 Karma

stwong
Communicator

seems need to put plaintext Splunk username/password in SplunkJS configurations.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...