Hi,
I have a iOS mobile application that currently queries a web-server, recieves a JSON object and presents this in the iOS app to my users.
The JSON object comes from the parsing and analysis of a csv file using ruby. I am thinking about changing this to use Splunk.
I am trying to piece together the 'splunk in the middle'. Do I need some middleware that queries the splunk API and then pushes this as JSON, or should my iOS mobile app query my splunk API directly? Or is neither of these prefered and I should look at something else?
Thanks,
You can index the csv in Splunk Enterprise, then have your iOS app to call the splunkd REST API. Check the REST API Ref: http://docs.splunk.com/Documentation/Splunk/6.2.0/RESTREF/RESTsearchExamples