Using the Splunk REST API (DSRAPI) – Zarys informacji

Szczegółowy program szkolenia

Topic 1 – Splunk REST API

  • Introduce REST
  • Review HTTP requests
  • Describe the Splunk REST API
  • Discuss authentication methods

Topic 2 – Response Data

  • Review HTTP responses
  • Describe the Atom specification
  • Demonstrate how to retrieve JSON
  • Explain how to parse a response

Topic 3 – Administration APIs

  • Introduce the administration APIs
  • Update configuration files
  • Work with indexes
  • Manage users

Topic 4 – Namespaces and Access Control

  • Introduce namespaces
  • Explain namespace use cases
  • Implement access control

Topic 5 – Search

  • Identify search components
  • Review search best practices
  • Create a search and retrieve results
  • Discuss oneshot searches

Topic 6 – Advanced Search

  • Utilize real-time searches
  • Summarize export searches
  • Construct saved searches
  • Understand search job management

Topic 7 – HTTP Event Collector

  • Describe the HTTP Event Collector
  • Explain token management
  • Explore data ingestion
  • Implement data acknowledgement

Topic 8 – Key-Value Store

  • Examine the Key-Value Store
  • Define and manage a collection
  • Create and manage records