Splunk Search

How to search Splunk from external web application?

Communicator

Hi, we've a simple web application in PHP that queries user's status from different sources (e.g. LDAP, Oracle DB, etc.). Possible to search Splunk by passing arguments like username, time selector, etc. to a predefined report, and gives result in html ?

Sorry for the newbie question. Thanks.

/stwong

0 Karma
1 Solution

SplunkTrust
SplunkTrust

@stwong there are several options:

1) Embedded Scheduled reports : https://docs.splunk.com/Documentation/Splunk/7.2.6/Report/Embedscheduledreports

2) Splunk component in your web page using SplunkJS: http://dev.splunk.com/view/webframework-developapps/SP-CAAAEWR

3) Splunk Developer Cloud (beta introduced at .conf 2018): https://www.splunk.com/blog/2018/10/03/new-for-developers-splunk-developer-cloud-more.html

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

SplunkTrust
SplunkTrust

@stwong there are several options:

1) Embedded Scheduled reports : https://docs.splunk.com/Documentation/Splunk/7.2.6/Report/Embedscheduledreports

2) Splunk component in your web page using SplunkJS: http://dev.splunk.com/view/webframework-developapps/SP-CAAAEWR

3) Splunk Developer Cloud (beta introduced at .conf 2018): https://www.splunk.com/blog/2018/10/03/new-for-developers-splunk-developer-cloud-more.html

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"

View solution in original post

0 Karma

Communicator

Seems 2) suits our need while 1) doesn't accept parameter passing from the external web to the report.

Thanks for your help.

0 Karma

Communicator

seems need to put plaintext Splunk username/password in SplunkJS configurations.

0 Karma