Does anybody know what might be causing this behavior or how I can overcome this issue? I remember reading that there is something strange about the local interpreter that could be causing this, but I cannot find it again on google. There is no difference if I execute the script with /opt/splunk/bin/splunk cmd. This behavior happens if I use the bash interpreter to execute the script (./script.sh) or (/opt/splunk/etc/app/app_name/bin/script.sh). 2 Search Splunk with Rest API without a saved search. POST a query to Splunk REST API /search/jobs/ endpoint in Golang. I have turned on debug logging for JsonWebTokenHandler and see no issue. Use the REST API Reference to learn about available endpoints and operations for accessing, creating, updating, or deleting resources. cc./cache.aspxd4960455558108974&wHPzpbAlnylrPwVEBo0YWSSyZASUM4mEE I am looking for if there is anyway I can call an external REST api (GET call, sample url shown below) from the Splunk search query panel, parse the JSON response and display in a table. It will return my search result as expected. If I manually re-run the same API request using the Token and the same Sid outside of the script on the terminal. No error message, but just no output at all. If I use the same script to try to retrieve the search results using the Sid, I get back nothing. I will receive back the Sid of that search. An example would be I can use the token in the script to initiate a search. The token seems to be able to make certain API calls in the script but it cannot retrieve the results of the call. If I try to use it within the script I am seeing unexpected behavior. I can use the Token to make ad-hoc Rest API requests via the terminal local to the searchhead. There are basically 4 simple steps to create a search job and retrieve the search results with Splunk’s REST API and they are: Get a session key. From the /restapi web page, you will find links to all three. Token Authentication has been enabled, and I can verify that the Token is enabled and valid. You will use the SDK for your chosen language with the REST API to access and. The script will be used by a custom app that is located on a searchhead (linux). Please Note If this is a prod system or Splunk Enterprise, the API may not be accessible remotely.

I need to create a bash script that uses an auth token to make calls to the Splunk Rest API. This post will cover the following: Connecting to Splunk with the Python SDK, executing a search and receiving the results Connecting to Splunk without the SDK, using httplib and beautifulsoup. This blog post may also be useful: Using HttpClient to Consume ASP.I am trying to work through an issue and cannot seem to find a answer. See this question and its answers for more details on why a using statement was not used on the HttpClient instance in this case: Do HttpClient and HttpClientHandler have to be disposed between requests?įor more details, including other examples, see Call a Web API From a. If you plan on making multiple requests, you should re-use your HttpClient instance. This is not necessary if the containing object will be disposed of for example in this case the HttpClient instance will be disposed automatically when the application terminates so the following call is superfluous. Limiting the messages added to info.csv will mean that these messages will not be available in the UI and/or the REST API. Messages logged to the info.csv file are available to REST API clients and Splunk Web. Article What is the Splunk REST API Written by: The Kinney Group Team Last Updated: FebruOriginally Published: DecemThe Splunk platform REST API provides the ability to create, read, update, or delete resources across the Splunk Enterprise platform. Dispose once all HttpClient calls are complete. This stanza controls logging of messages to the info.csv file. Make any other calls using HttpClient here. Var dataObjects = >().Result //Make sure to add a reference to .dllĬonsole.WriteLine(')', (int)response.StatusCode, response.ReasonPhrase) HttpResponseMessage response = client.GetAsync(urlParameters).Result // Blocking call! Program will wait here until a response is received or a timeout occurs. New MediaTypeWithQualityHeaderValue('application/json')) Private string urlParameters = '?api_key=123' Here's how your example would look when implemented using the ASP.NET Web API Client Library: using System

You will need to add this NuGet package to your solution. I thought I'd post an updated answer since most of these responses are from early 2012, and this thread is one of the top results when doing a Google search for 'call restful service C#'.Ĭurrent guidance from Microsoft is to use the Microsoft ASP.NET Web API Client Libraries to consume a RESTful service. The ASP.NET Web API has replaced the WCF Web API previously mentioned.

Splunk call rest api from search