Whenever i want to create new events via REST receivers endpoint, can i create new fields and set their values for the fields?? ... View more

I want to access a Splunk remote server that has the same subnet mask, but of a different network from the client computer. I am able to trace the route from the server computer to client computer and trace route from the client to the server computer via windows tracert command. I read up from a source that states that : however if host b is on a different network then host a will have to communicate via a gateway, and the way host a can tell if it is on the same network is using the subnet mask. For example Host A 200.200.200.5 Host B 200.200.200.9 Host C 200.200.199.6 Subnet Mask 255.255.255.0 If Host A communicates with Host B, they are both have Network ID 200.200.200 so Host A communicates directly to Host B. If Host A communicates with Host C they are on different networks, 200.200.200 and 200.200.199 respectively so Host A would send via a gateway. That means that the client will have to communicate to the server via a gateway as well, am i right? so if thats the case how do i replace the "localhost" in the url with the ipaddress of the server. Does it include the gateway address? https://IPADDRESS:8089/services .... ... View more

I want to access a Splunk remote server that has the same subnet mask, but of a different network from the client computer. What are the steps to get the ipaddress of the remote server and insert the ipaddress to the url that maps to the Splunk REST endpoint? ... View more

Am i right to say that the , host, host_regex,index, source,sourcetype are the request parameters for the Receiever endpoint https://localhost:8090/services/receivers/stream ? Are they sent in the entity body via POST method? ... View more

I'm doing Java Splunk REST API to insert new events via the REST API. I used the Java's splunk service api to add headers and put in the path for the receiver end point Map<string, object=""> args = new HashMap<string, object="">(); args.put("Authorization", "Basic YWRtaW46cGFzcw=="); args.put("x-splunk-input-mode", "streaming"); String path = "https://localhost:8089/services/receivers/stream?data="+data+"&host="+host+"&index="+index+"&source="+source+"&sourcetype="+sourcetype; authService.post(path,args); A HTTP 404 error was thrown when i run the code. The receiver wasn't present. Probably due to the HttpHeaders. ... View more

How to access a Splunk remote Server with the given URL that points to the management address and port? What is the management address and what is the port number for the remote server? ... View more

Is Splunk's indexed data difficult or nearly impossible to modify? ... View more

Lets say if i do not search for the data using the splunk search then can i edit the data directly from the splunk server using the Splunk's REST api? ... View more

POST data/inputs/ad/{name} Modifies a given AD monitoring stanza. What does this mean exactly? What can i do using this REST API endpoint? ... View more

Does Splunk REST API allow us to update search results when search results are retrieved and then return the updated result back to splunk? If that's the case, what is the API for that? ... View more

Am i right to say that the results derived from the Splunk search is returned as XML by default? I was using the Java Splunk REST API to get the results. This is the code that i used : InputStream dataStream = job.getResults(); Does this input stream data contain XML? I attempted to output the data as XML file using Java but sometimes I can view the XML file and most of the time i ran the same Splunk search using Java and when i view the xml file on the browsers, I saw the message that says something like XML must have a top level element and sometimes there is a blank space on the browser and the windows notepad. What is the cause of this problem? I need an answer urgently!!!!! ... View more

To create a search job one has to 1.use the REST endpoint '/services/search/jobs'. 2.Use the POST method and include the session key as 'Authorization' in the header 3.Provide the search string in the request body. 4.A search ID will be returned as a Response. Am i right to say these steps are necessary to create a search job? And so does these steps apply to Java Splunk APIs? ... View more