I want to export data from Splunk via rest API, I've been wondering whether there is a good "Splunk export" solution that can help me to send my query output/result to a third part application with the help of rest API I have created saved serah in Splunk , and now I want to export the output of my saved serach to third party application on regular interval(once a week), I have the API details of that application with me. I checked webhook option but that was not much help since payload is fixed in that and can only be used with Alert type, Can anyone please suggest any other way . Demo query: index=main| timechart avg(page) For Example API: https://webhook.site/66e9b123-ee72-4621-98bb-4ab23a46d1e8 Happy to clarify more details if required. ... View more

Hi Team, I am getting below error in spluk local insatance : Error details : Invalid key in stanza [tcp01] in C:\Program Files\Splunk\etc\app s\XYZ_test_local\default\indexes.conf, line 5: maxTotalDatasize (value: 1024MB ). Invalid key in stanza [tcp01] in C:\Program Files\Splunk\etc\app s\XYZ_test_local\default\indexes.conf, line 7: maxWarmDBcount (value: 4). Your indexes and inputs configurations are not internally consistent tent. Indexes.conf : [tcp01] coldPath = $SPLUNK_DB/tcp01/colddb homePath = $SPLUNK_DB/tcp01/db thawedPath = $SPLUNK_DB/tcp01/thaweddb maxTotalDatasize = 1024MB maxHotSpanSecs = 243264 maxWarmDBcount = 4 maxHotbuckets = 3 disabled  = false [monitor://C:\Program Files\Splunk\XYZ_Alerts*] sourcetype=st01 index=tcp01 blacklist=.(gz|zip)$ initCrcLength=750 ... View more