Overview
This 9-hour course is for developers who want to use the Splunk REST API to interact with Splunk servers. In this course, use curl and Python to send requests to Splunk REST endpoints and learn how to parse and use the results. Create a variety of objects in Splunk, learn how to change properties, work with and apply security to Splunk objects, run different types of searches and parse its results, ingest data using the HTTP Event Collector and manipulate collections and KV Stores.
Skills Covered
- Introduction to the Splunk REST API
- Namespaces and Object Management
- Parsing Output
- Oneshot Searches
- Normal and Export Searches
- Advanced Searching and Job Management
- Working with KV Stores
- Using the HTTP Event Collector (HEC)
Who Should Attend
Everyone can attend.
Course Curriculum
Prerequisites
To be successful, students should have a solid understanding of the following:
- Splunk Fundamentals 1 and 2
Or the following single-subject courses:
- What is Splunk?
- Intro to Splunk
- Using Fields
- Working with Time
- Statistical Processing
- Search Under the Hood
- Introduction to Knowledge Objects
Students should also understand the following courses:
- Splunk Enterprise Data Administration (Recommended)
Course Modules
Exam & Certification
This course is not associated with any Certification.
