Hey guys,
How to
Pass JSON or XML as parameters to custom Python script via Splunk REST API ?
Example:
I use REST API like this
curl -ku MyUser:MyPwd https://MyServer:8089/services/search/jobs/export?output_mode=json -d search=' | MyScript param1 param2 '
What if I want these parameters
param1 ="JonSnow"
param1 ="[{\"name\":\"Ned\",\"house\":\"Stark\"}]
Version 6.5.2 or 7+ of Splunk.
Hey guys,
Solved long time ago. This is standart: passing smth like JSON thru REST API is just passing a string parameter for a custom Python script (when calling via REST API a search like " | myScript arg1=\"aaa\" arg2=\"bbb\" "
Hey guys,
Solved long time ago. This is standart: passing smth like JSON thru REST API is just passing a string parameter for a custom Python script (when calling via REST API a search like " | myScript arg1=\"aaa\" arg2=\"bbb\" "
Could you provide more clarity on this? Are you trying to implement a custom REST endpoint?
Hi, I've updated the question. Please take a look.
Still doesn't make sense. Is you script hosted as a custom REST Endpoint ?
It's just a custom script on my server that runs several Splunk searches. I want to pass not only alphanumeric parameters, but a json package to my searches to be used in alerting rules.