Splunk Search

Is there a way to list all the available REST endpoints via search query ?

splunker12er
Motivator

When I search for :

| rest /services/server

it lists below endpoints available for server:

https://127.0.0.1:8089/services/server/control
https://127.0.0.1:8089/services/server/info
https://127.0.0.1:8089/services/server/introspection
https://127.0.0.1:8089/services/server/logger
https://127.0.0.1:8089/services/server/roles
https://127.0.0.1:8089/services/server/settings 

but , it doesn't list the below : (i manually type "/status" to the search query to get the below endpoints)

https://127.0.0.1:8089/services/server/status/dispatch-artifacts    
https://127.0.0.1:8089/services/server/status/fishbucket
https://127.0.0.1:8089/services/server/status/limits    
https://127.0.0.1:8089/services/server/status/partitions-space

Neither I see the above endpoints in splunk docs
Is there a way that I can list all the available endpoints via splunk search ??

Version : 6.3.3

1 Solution

MuS
Legend

Hi splunker12er,

there is a list available within Splunk, call this URI http[s]://YourSplunkServerHere:[YourSplunkPortHere]/en-GB/paths
This will provide you a long list a endpoints, don't nail me down if there is one missing 😉

Hope this helps ...

cheers, MuS

View solution in original post

rsathish47
Contributor

do we have any internal logs to get server role information using search query but not using rest command?

0 Karma

MuS
Legend

Hi splunker12er,

there is a list available within Splunk, call this URI http[s]://YourSplunkServerHere:[YourSplunkPortHere]/en-GB/paths
This will provide you a long list a endpoints, don't nail me down if there is one missing 😉

Hope this helps ...

cheers, MuS

fdi01
Motivator

try like :

| rest /services/server/status| append [| rest /services/server/]

splunker12er
Motivator

No. I need an answer to list all types of endpoints available in splunk.

I mean that /services/server/ - doesn't list /status endpoint.
when I search explicitly /services/server/status it shows results.

like this I there may be as many endpoints., Is there a way to list all ?

0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with William Searle

The Splunk Guy: A Developer’s Path from Web to Cloud William is a Splunk Professional Services Consultant with ...

Major Splunk Upgrade – Prepare your Environment for Splunk 10 Now!

Attention App Developers: Test Your Apps with the Splunk 10.0 Beta and Ensure Compatibility Before the ...

Stay Connected: Your Guide to June Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...