Dashboards & Visualizations

Can i use REST API of Splunk itself in Splunk?

kartik13
Communicator

I am trying to make a custom dashboard as Splunk dashboard using a third party framework. I am trying to connect to splunk through REST API ,but during ajax call its giving me Request header field Access-Control-All-Headers is not allowed by Access-Control-Allow-Headers. error.My server.conf config are as follows

    [sslConfig]
sslKeysfilePassword = $1$0RQz5YVamCN2
enableSplunkdSSL = false
[general]
pass4SymmKey = $1$hlhnucAc03F2
serverName = KARTIKES-WS01

[lmpool:auto_generated_pool_download-trial]
description = auto_generated_pool_download-trial
quota = MAX
slaves = *
stack_id = download-trial

[lmpool:auto_generated_pool_forwarder]
description = auto_generated_pool_forwarder
quota = MAX
slaves = *
stack_id = forwarder

[lmpool:auto_generated_pool_free]
description = auto_generated_pool_free
quota = MAX
slaves = *
stack_id = free

[lmpool:auto_generated_pool_enterprise]
description = auto_generated_pool_enterprise
quota = MAX
slaves = *
stack_id = enterprise

[license]
active_group = Free

[httpServer]
crossOriginSharingPolicy = *
allowBasicAuth = false

[general]
listenOnIPv6 = yes

and my ajax request is

$.ajax({
                url:"http://localhost:9080/services/search/jobs/export",
                type:"POST",
                dataType:"json",

                data:JSON.stringify(somedata),
                headers:{
                "Access-Control-Allow-Origin" : "*",
                "Access-Control-Allow-Methods" : "GET,POST,PUT,DELETE,OPTIONS",
                "Access-Control-Allow-Headers": "Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With"

                },
                crossDomain: true,
             contentType:"application/x-www-form-urlencoded",
                success:function(data){
                    console.log("Data is loaded" + data);
                    },
                error:function(){
                    console.log("Something went Wrong");
                }

      });

So , Can i use REST API in SPlunk itself? Any idea on this?

0 Karma
1 Solution

lguinn2
Legend

Yes, you can run REST API commands in the Splunk search UI. Here is an app that shows examples of exactly how to do it:
REST Endpoint Examples

Download the app and try it out, then look at the implementation to see how they did it!

View solution in original post

jaredlaney
Contributor

Is the error referring to this?

"Access-Control-Allow-Headers": "Content-Type, Access-Control-Allow-Headers, Authorization, X-Requested-With"

where you're using Access-Control-Allow-Headers in the variable Access-Control-Allow-Headers?

kartik13
Communicator

yes it was refering to that .I found the solution RESTAPI of Spluk accepts only the Content-Type in headers with following details:

"Content-Type":"application/x-www-form-urlencoded;charset=utf-8"

0 Karma

lguinn2
Legend

Yes, you can run REST API commands in the Splunk search UI. Here is an app that shows examples of exactly how to do it:
REST Endpoint Examples

Download the app and try it out, then look at the implementation to see how they did it!

kartik13
Communicator

Thanks .. I found the solution

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...