Developing with Splunk's REST API 8.1
Upcoming Classes
Online
Instructor-led online training
Location | Mar 2021 | Apr 2021 | May 2021 | Jun 2021 | Jul 2021 | Aug 2021 | Sep 2021 |
---|---|---|---|---|---|---|---|
AMER Eastern Time - Virtual |
Mar 8 – Mar 9 |
Apr 5 – Apr 6 Apr 26 – Apr 27 |
May 10 – May 11 May 24 – May 25 |
Jun 7 – Jun 8 |
Jul 12 – Jul 13 |
Aug 9 – Aug 10 | |
EMEA UK Time - Virtual |
Mar 8 – Mar 9 |
Apr 12 – Apr 13 |
May 10 – May 11 |
Jun 7 – Jun 8 |
Jul 12 – Jul 13 |
Aug 9 – Aug 10 | |
AMER Pacific Time - Virtual |
Mar 22 – Mar 23 |
Apr 19 – Apr 20 Apr 19 – Apr 20 |
Jun 21 – Jun 22 |
Jul 26 – Jul 27 |
Aug 23 – Aug 24 |
Germany
Location | Mar 2021 | Apr 2021 | May 2021 | Jun 2021 | Jul 2021 | Aug 2021 | Sep 2021 |
---|---|---|---|---|---|---|---|
Munich Germany (Arrow) |
Jul 2 |
Summary
This nine hour course teaches you how to use the Splunk REST API to accomplish tasks interacting with Splunk servers. In this course, you will use curl and Python to send requests to Splunk REST endpoints and will learn how to parse and use the results. The course will show you how to create a variety of objects in Splunk, how to change properties, work with and apply security to Splunk objects, run different types of searches and parse its results, ingest data using the HTTP Event Collector and manipulate collections and KV Stores.
Description
- Introduction to the Splunk REST API
- Namespaces and Object Management
- Parsing Output
- Oneshot Searching
- Normal and Export Searching
- Advanced Searching and Job Management
- Working with KV Stores
- Using the HTTP Event Collector
Objectives
Module 1 – Introduction to the Splunk REST API
- Use the proper case in searches
- Introduce the Splunk development environment and its REST endpoints
- Know to which Splunk server you should be connected to accomplish a desired task
- Authenticate with a Splunk server, with and without a session
Module 2 – Namespaces and Object Management
- Understand general CRUD with the REST API
- Understand how a namespace affects access to objects
- Use the servicesNS node and a namespace to access objects
- Understand how the sharing level and access control lists affect access to objects
- Modify the sharing level and the permissions on an object
- Using the rest command
Module 3 – Parsing Output
- Understand the general structure of Atom-based output
- Format Atom-based JSON output
- Write code that uses the API and parse responses
Module 4 – Oneshot Searches
- Review search language syntax and search best practices
- Execute a oneshot search
- Execute an export search
- Get search results
Module 5–Normal and Export Searching
- Identify types of searches
- Create normal and export searches
- Get:
- Search results
- Search job status and other search job properties
Module 6 – Advanced Searching and Job Management
- Executing a real time search
- Working with large results sets
- Working with saved searches
- Managing search jobs
Module 7 – Working with the KV Store
- Define the function of a KV Store
- Define collections and records
- Perform CRUD operations on collections and records
Module 8 – Using the HTTP Event Collector (HEC)
- Create and use HEC tokens
- Input data using HEC endpoints
- Get indexer event acknowledgements