What is the default REST API url to post data at default index? I have rest api APP configured as input in splunk.
Inputing data into splunk via a RESTful post does not fall within the realm of "normal" activity.
Supported, for sure, but not normal.
See this for more info: http://answers.splunk.com/answers/241698/how-do-i-configure-splunk-for-rest-api-input.html
The receivers/simple & receivers/stream rest endpoints probably require authentication. Keep that in mind.
hi,
should be https://ursplunkserver:8089/servicesNS/nobody/search/data/indexes/default
More info can be found here
When I use above URL in postman or any tool to post data, I am unable to do so, but when I use below URL I am able to post JSON data. https://ursplunkserver:8089/services/receivers/simple
Do you see any reason why I am unable to post by your URL?
