Hi. Why would you try to add a self signed cert... when splunkd already has its own self signed cert.... What are you trying to acces in the splunkd? If splunkweb is working, splunkd (RestApi) is already working. I suggest you to see rest Api uri qick-reference. http://docs.splunk.com/Documentation/Splunk/7.1.3/RESTREF/RESTlist If you want to acces from browser you need to acces a rest endpoint with rest method available, and tell to the browser to go ahead when promted the self signed cert warning here an example: https://localhost:8089/services/authentication/current-context NOTE the https part since there is not an automatic redirec In order to avoid the request of a valid certificate... in every computer get rid of the self-signed cert and get a trusted SSL certificate, you can create your free trusted cert with Let's Encrypt https://www.splunk.com/blog/2016/08/12/secure-splunk-web-in-five-minutes-using-lets-encrypt.html Link Above is How-to to secure splunkWeb.... I don´t now how to add it to splunkd... I would like to know ... that's why I got here... ... View more

import urllib2 import urllib import httplib2 myhttp = httplib2.Http(disable_ssl_certificate_validation=True) baseurl = 'https://127.0.0.1:8089' searchjob = self.myhttp.request(self.baseurl + '/services/search/jobs','POST', headers={'Authorization': 'Splunk %s' % self._metadata.searchinfo.session_key},body=urllib.urlencode({'search': searchquery}))[1] Using the code above you can get logged in splunkd using token session of logged user ... View more

Hi mkhab_splunk did you find any solution. I'm facing same problem ... View more

¡Thank you arkadyz I have succesefully implmented it! The problem I had was related to CORS. ... View more

¿Hi did you find out a solution? ... View more

In order to get it done, you have to configure server.conf setting crossOriginSharingPolicy = http://localhost:8000 change to match yours. Following code was fine to me in the JS. But if you are trying to consume the webservice from SplunkWeb to Splunkd, I strongly recommend you to expose the endpoint in your web.conf and the acces it through localhost:8000/en-US/splunkd/__raw/services/custom_service in order to avoid CORS headers problems. For web.conf [expose:echo_persistent] methods = POST pattern = echo_persistent This code was fine to me var text = $("#text").val(); var xhr = new XMLHttpRequest(); xhr.open('POST', '/en-US/splunkd/__raw/services/custom_service', true); xhr.setRequestHeader('X-Requested-With', 'XMLHttpRequest'); xhr.setRequestHeader('X-Splunk-Form-Key', document.cookie.match(/splunkweb_csrf_token_8000=(\d+)/)[1]); xhr.send(text); You can search for splunk_rest_examples for further information. ... View more

Could you give and example, I can´t figure it out. I'm getting No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin 'http://localhost:8000' is therefore not allowed access. ... View more

Hi, did you find the solution? ... View more

This seems to be a problem related to the number of elements that populate the multiselect. In order to make it smoothly, you could try to add some filters in order to get less data into the multiselect element. ... View more