How to use Splunk calling a web service (SOAP) and index the response directly?

[Tarek1977]

Hello there,

I'm trying to put a web service call response (SOAP) into Splunk. It is possible to directly get the data stream into Splunk (without writing the response to a file and put it into a index directory)?

For example, I call the web service via a java program on the Splunk server (or from a remote server). I've got the response, so I have the option to write down the response to a file and forward it to Splunk or put the stream directly to (some) kind of service running on the Splunk server? Is that possible? Thank you in advance for your answers!

[aweitzman]

You might want to look into Splunk's REST API:

http://docs.splunk.com/Documentation/Splunk/6.1.1/RESTAPI/RESTinput#receivers.2Fsimple
http://docs.splunk.com/Documentation/Splunk/6.1.1/RESTAPI/RESTinput#receivers.2Fstream

Alternatively, you can open up a TCP or UDP port on the Splunk server for listening, and then send the data there directly.

[ekcsoc]

I downvoted this post because provided suggestion is not for soap request

[Tarek1977]

Hi aweitzman,

thank you for your answer. I'll check the REST API, if I can use it. I've read the TCP doc before, but I'm not sure, if this will solve my "issue".