All Apps and Add-ons

Splunk real-time data input from HTML page not working

tamduong16
Contributor

I've been trying to look for a way to for Splunk to input real-time data and I come across Rest API thinking it could be a solution to my problem. But after I set it up a Rest api base on the instruction from Splunk, no data is being added to Splunk. Could anyone let me know what I did wrong here? For testing purposes, I use a Wikipedia site as an endpoint url and I did not set up any kind of handler. I just want to know if this REST api could get me any type of information from the site. The below is a picture of the rest api I set up:
alt text

0 Karma

Damien_Dallimor
Ultra Champion

Don't use the _json sourcetype. Define a custom sourcetype.

alt text

0 Karma

tamduong16
Contributor

I set a custom sourcetype but it doesn't work! Do I have to configure the source type so that it look for html content? Thanks

0 Karma
Get Updates on the Splunk Community!

Detecting Remote Code Executions With the Splunk Threat Research Team

REGISTER NOWRemote code execution (RCE) vulnerabilities pose a significant risk to organizations. If ...

Observability | Use Synthetic Monitoring for Website Metadata Verification

If you are on Splunk Observability Cloud, you may already have Synthetic Monitoringin your observability ...

More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk

Tuesday, May 14, 2024  |  11AM PT / 2PM ET Register to Attend Join us for this Tech Talk and learn how to ...