Streaming
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Streaming
/services/streams/search
Provides synchronous event search streaming service
GET
Executes a simple search, i.e. no pipe support
Query Arguments
q - The simple search string (no leading 'search' operator) to execute
Response Status
200 - Method executed successfully
Response Body
// The return content is raw event text in streaming format. // There is no formatting, or timestamping on the data. // Close the client connection to stop the search.
/services/streams/livetail
Provides synchronous data input tailing service
GET
Streams raw data being received by Splunk
Query Arguments
q - The simple search string (no leading 'search' operator) to apply to the incoming data stream
Response Status
200 - Method executed successfully
Response Body
// The return content is raw event text in streaming format. // There is no formatting, or timestamping on the data. // Close the client connection to stop the search.
This documentation applies to the following versions of Splunk: 3.2 , 3.2.1 , 3.2.2 , 3.2.3 , 3.2.4 , 3.2.5 , 3.2.6 View the Article History for its revisions.