I am using this app https://splunkbase.splunk.com/app/4146
The curl command is not picking up method=POST
and always returning error 405
and
{"error":{"detail":"GET method not supported for API","message":"Method not Supported"},"status":"failure"}
I used this command
| eval header="{\"Content-Type\":\"application/json\", \"Accept\":\"application/json\"}"
| curl method=post uri=url-rest-api user=username pass=password headerfield= header
Now I am not sure how to make a POST call to an external API from Splunk search. Every time it is being detected as GET.
Please try the latest version of the app 1.2.4 which contains many bug fixes.
Please try the latest version of the app 1.2.4 which contains many bug fixes.
You need to edit curl.py as shown here:
https://answers.splunk.com/answers/738867/web-tools-add-on-ta-webtools-curl-command-throws-a.html
I made the changes suggested in the link.. Here is what I see after this:
| curl method=post uri=<servicenow-link-incident-creation> splunkauth=false
{"error":{"message":"Method not Supported","detail":"GET method not supported for API"},"status":"failure"}
| curl method=post uri=<servicenow-link-incident-creation> splunkauth=true
{"error":{"message":"User Not Authenticated","detail":"Required to provide Auth information"},"status":"failure"}
Are you trying to use my curl command to integrate with service now?
yes I am .. would you foresee an issue?
You should be able to do it yes, but there's an app for service now. Why not use it instead?