Splunk Search

Why does my search in curl return empty results?

Buscatrufas
Path Finder

Hi guys,

I tried to make a search using curl, but the problem is when the command finalizes, it return empty.

Here is my command:

curl -u user:pass -k https://myURL/services/search/jobs/export --data-urlencode search="search | inputlookup lookup_cve | join CPE_ASSOCIATED [search index=\"analisis_vuln\" sourcetype=\"nmap_csv\" | stats values(ip) by CPE_ASSOCIATED]" -d output_mode=csv -o reporte_`date +%Y-%m-%d`

I don't know where the problem is 😞

Thanks for any help.

Best Regards, Buscatrufas 🙂

0 Karma
1 Solution

Buscatrufas
Path Finder

Can close this guys, thanks anyway. I fixed it by removing search from the string. The final command is the following:

 curl -u user:pass -k https://myURL/services/search/jobs/export --data-urlencode search="| inputlookup lookup_cve | join CPE_ASSOCIATED [search index=\"analisis_vuln\" sourcetype=\"nmap_csv\" | stats values(ip) by CPE_ASSOCIATED]" -d output_mode=csv -o reporte_`date +%Y-%m-%d`

Thanks 🙂

View solution in original post

Buscatrufas
Path Finder

Can close this guys, thanks anyway. I fixed it by removing search from the string. The final command is the following:

 curl -u user:pass -k https://myURL/services/search/jobs/export --data-urlencode search="| inputlookup lookup_cve | join CPE_ASSOCIATED [search index=\"analisis_vuln\" sourcetype=\"nmap_csv\" | stats values(ip) by CPE_ASSOCIATED]" -d output_mode=csv -o reporte_`date +%Y-%m-%d`

Thanks 🙂

Get Updates on the Splunk Community!

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...