Hi Splunkers.
I'm trying to set up a REST input to bring back output from an API.
These are the parameters used to form the API Endpoint URL. i.e.
https:///<1st_parameter>//token?api-version=
In the above example I need to provide the above parameters to build the entire endpoint URL both before and after the "?" etc as opposed to hard-coding them in the endpoint URL field in the setup screen.
The config screen in Splunk web config for the REST input provides an area for URL arguments and and HTTP Header properties but nothing used in either of these two areas seems to get substituted into the actual URL that Splunk calls when it tries to contact the endpoint.
Any advice on where these parameters go so they can flesh out the endpoint URL when it's called?
Note that the initial call to the API is a POST to get an access token with all subsequent calls being a GET.
Finally, in case it's relevant to answering the question, this input will be running on a HF.
Cheers and thanks in advance.
↧