Retrieve the Data from the SPLUNK

[Santhosh.palvayi]

Hi,

 

 I am getting a message through the Queue and the XML message is stored in the Splunk.

How to access the data/XML msg from the Splunk by using CA DEVTEST 10.1. Kindly anyone have steps.

Please share me the Steps/Document which will help me to do step by step. Thanks in Advance.

 

In basic, I want to do the below:

Connect and access to Splunk and retrieve the Data from the Splunk .

Note : The user(it is me) is having the access to plunk.

Manually I am able to go to Splunk and view the data

 

Regards,

Santhosh

[wooda20]

Hi Santosh,

 

The Splunk REST API user manual is here:- http://docs.splunk.com/Documentation/Splunk/latest/RESTUM/RESTusing 

 

The quintessential example given there is 

curl -k -u admin:pass https://localhost:8089/services/messages

To obtain all messages. 

 

In DevTest terms, this is a REST step, configured as follows

 

 

Note that the "admin:pass@" part of the URL will be generated when you fill out the User and Password fields. 

[Santhosh.palvayi]

Hi Dave Woodman,

 

 Thanks for the Reply. I will try today and let you know the status. 

 

Regards,

Santhosh Palvayi