Questions tagged [splunk-api]

12 questions
2
votes
0 answers

Connecting to Splunk using python failing with error ConnectionResetError: [Errno 104] Connection reset by peer

I am trying to connect to Splunk using below python code . But failing with error ConnectionResetError: [Errno 104] Connection reset by peer import urllib import httplib2 username = '*********' password = '******' baseurl =…
Ram
  • 21
  • 1
1
vote
0 answers

Service, host_name, process_id, runtime information is not available in signalfx when using micrometer for pushing custom metrics

I am trying to send custom metrics to Splunk APM using micrometer dependencies. after adding the dependencies and setting the application properties I am Seeing metrics in the APM dashboard but Service, host_name, process_id, and runtime information…
1
vote
2 answers

Splunk dashboard and reports source backup for versioning

We are trying to take a backup of Splunk dashboards and reports source code for versioning. we are on an enterprise implementation where our rest calls are restricted. we can create and access dashboards and reports via Slunk UI, but would like know…
1
vote
1 answer

Splunk REST API - How to add a webhook action?

I want to create an alert, and add a webhook action to it. However, looking at the Splunk documentation, it doesn't seem to say how to do it. Here is my current request: curl -s -k -u admin:password…
user3207874
  • 2,815
  • 2
  • 13
  • 18
0
votes
0 answers

Splunk SDK search query outputs limited information

I am currently using Splunk SDKs to export data out of Splunk with the following: SPLUNK QUERY: search index=***** sourcetype=*** host={host} earliest={earliest} latest={latest} I have a python script that…
Devoper
  • 1
  • 3
0
votes
0 answers

Splunk API performance

I am trying to pull some data from splunk through its API. My config has max_count of 1, search string with index, exec_mode is oneshot (Because of the nature of the design), earliest and latest and within 2 mins, output_mode is json. Response time…
srm2023
  • 1
  • 2
0
votes
1 answer

how i can write a shell script to submit job in splunk and wait to job to be finish and after download the csv file from splunk

I am running below shell script command to submit job in splunk ,after first curl command execution, on splunk UI it is taking some time (not constant) to complete the job then only report.csv file will be ready on splunk to download. I have given…
Kunal
  • 1
  • 3
0
votes
1 answer

Splunk : Rest Command to fetch out all adhoc or unsaved searches performed on Splunk

Is there any Rest query in Splunk to fetch the unsaved / adhoc searches performed on Splunk. To give you a background, team is trying to understand the load patterns and we are able to figure out how to find out saved searches performed with below…
0
votes
1 answer

When ever a particular search query matches in splunk i would like to send the search result to a rest api

I am new to Splunk and its apps. My Requirement is When Splunk got the particular logging like "Login Success" i would like to send that whole message to a rest API. I can use a scheduler to call Splunk-Api and get the result, but i don't want to…
0
votes
1 answer

Data ingestion with HTTP Event Collector in Splunk Web vs data ingestion using Splunk REST API

I am new to Splunk and have been exploring it's features. I have tried to ingest some dummy data into Splunk Web using the Http Event Collector(HEC). I wanted to know if there is any other REST API available in splunk for data input. If so, then…
0
votes
1 answer

Splunk Addon builder alert action to store results in to a custom index

I am working on an addon to collect event results based on an alert and send it to an API endpoint. Once the response is a success the endpoint returns a success message in a JSON format and I Want to store it in a custom index and sourcetype. I…
Naresh Kumar
  • 185
  • 3
  • 12
-1
votes
1 answer

python script to run splunk query and get output as text output

Trying to run below code it executes but I do not get the correct value any help is appreciated expecting single value like 492. Code runs but does not give the correct value. Tried splunk library but unable to use those. import urllib import…
user3754136
  • 509
  • 11
  • 25