Splunk Search

Why does my search in curl return empty results?

Buscatrufas
Path Finder

Hi guys,

I tried to make a search using curl, but the problem is when the command finalizes, it return empty.

Here is my command:

curl -u user:pass -k https://myURL/services/search/jobs/export --data-urlencode search="search | inputlookup lookup_cve | join CPE_ASSOCIATED [search index=\"analisis_vuln\" sourcetype=\"nmap_csv\" | stats values(ip) by CPE_ASSOCIATED]" -d output_mode=csv -o reporte_`date +%Y-%m-%d`

I don't know where the problem is 😞

Thanks for any help.

Best Regards, Buscatrufas 🙂

0 Karma
1 Solution

Buscatrufas
Path Finder

Can close this guys, thanks anyway. I fixed it by removing search from the string. The final command is the following:

 curl -u user:pass -k https://myURL/services/search/jobs/export --data-urlencode search="| inputlookup lookup_cve | join CPE_ASSOCIATED [search index=\"analisis_vuln\" sourcetype=\"nmap_csv\" | stats values(ip) by CPE_ASSOCIATED]" -d output_mode=csv -o reporte_`date +%Y-%m-%d`

Thanks 🙂

View solution in original post

Buscatrufas
Path Finder

Can close this guys, thanks anyway. I fixed it by removing search from the string. The final command is the following:

 curl -u user:pass -k https://myURL/services/search/jobs/export --data-urlencode search="| inputlookup lookup_cve | join CPE_ASSOCIATED [search index=\"analisis_vuln\" sourcetype=\"nmap_csv\" | stats values(ip) by CPE_ASSOCIATED]" -d output_mode=csv -o reporte_`date +%Y-%m-%d`

Thanks 🙂

Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...