Getting Data In

How do I configure Splunk for REST API input?

birarich
Explorer

How to configure Splunk for REST API input? Currently in "Data inputs" I cannot see REST API input type.

jacobwilkins
Communicator

What, exactly, are you wanting to do?

Are you wanting Splunk to accept HTTPS connections, and provide a REST endpoint where something can POST data?

Splunk does that without any setup required. See here: http://docs.splunk.com/Documentation/Splunk/6.2.3/RESTREF/RESTinput#receivers.2Fstream
There is also this: https://splunkbase.splunk.com/app/1901/

If you want Splunk to reach out and query some REST api, and then index the response, take a look at this:
https://splunkbase.splunk.com/app/1546/

lc3t35
New Member

"REST API Modular Input" is not yet certified for Splunk Cloud 😞
Is there a way to do it in Splunk Cloud ?

0 Karma

kmapgar
Explorer

I have this same question.

0 Karma

vgollapudi
Communicator

I was able to configure Splunk Rest API for our environment. Let me what questions you've regarding the configuration.

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...