This course teaches you how to work with the Splunk REST API to automate administration, run searches, and manage data programmatically. You will learn to send API requests, parse responses, and build integrations with Splunk Enterprise. You will cover authentication, configuration management, namespaces and access control, search jobs, the HTTP Event Collector, and the Key-Value Store. The course runs as nine hours of instructor-led content.
Who Should Attend
Splunk administrators, engineers, and application developers who want to automate Splunk tasks or integrate Splunk with other applications.
Prerequisites
- Splunk Enterprise System Administration (SESA)
- Splunk Enterprise Data Administration (SEDA)
- Experience with Python, JavaScript, or a similar scripting language
Course Objectives
- Make authenticated REST API requests to Splunk and parse JSON and Atom responses
- Use the administration APIs to manage configuration files, indexes, and users
- Apply namespaces and access control to Splunk objects
- Create, manage, and retrieve results from standard, real-time, export, and saved searches
- Ingest data with the HTTP Event Collector and manage tokens and acknowledgements
- Define and manage Key-Value Store collections and records
