We are using /api base url, is that correct for .splunkrc as it asks for host and in our environment we use url?
thanks for your help!
.splunkrc
# Splunk host (default: localhost)
host=splunkurl/api
# Splunk admin port (default: 8089)
port=443
# Splunk username
username=
# Splunk password
password=
# Access scheme (default: https)
scheme=https
# Your version of Splunk (default: 6.3)
version=9.0.4
@splunkreal - For the host you need to just IP address or hostname. The port should be a Splunk management port generally 8089 and not the Splunk UI port.
I hope this helps!!!
Hello, thanks so how would you connect from Python using base url? We have HA/FO servers in front of Splunk servers.
HA/FO shouldn't affect the URL for API for Splunk.
Base URL should be constructed as https://<host/ip>:8089
Theoretically, of course a reverse-proxy could affect a URI path of the request redirecting it into somewhere else on the backend but that would need to be explicitly configured.
Anyway see the https://docs.splunk.com/Documentation/Splunk/latest/RESTUM/RESTusing document and see the remark about namespaces on https://docs.splunk.com/Documentation/Splunk/9.1.3/RESTREF/RESTlist
Hi @PickleRick we use base url api already for curl commands and would like to use in python.
Just set host and port and let the splunklib handle the rest.
@splunkreal - Did you got to resolve your issue?
Hi @VatsalJagani no, we need to use base url api. Thanks.