Developing Dashboards, Views, and Apps for Splunk Web

 


Streaming

This documentation does not apply to the most recent version of Splunk. Click here for the latest version.

Streaming

/services/streams/search

Provides synchronous event search streaming service


GET

Executes a simple search, i.e. no pipe support


Query Arguments

q - The simple search string (no leading 'search' operator) to execute

Response Status

200 - Method executed successfully

Response Body

// The return content is raw event text in streaming format.  
// There is no formatting, or timestamping on the data.  
// Close the client connection to stop the search.

/services/streams/livetail

Provides synchronous data input tailing service


GET

Streams raw data being received by Splunk


Query Arguments

q - The simple search string (no leading 'search' operator) to apply to the incoming data stream

Response Status

200 - Method executed successfully

Response Body

// The return content is raw event text in streaming format.  
// There is no formatting, or timestamping on the data.  
// Close the client connection to stop the search.

This documentation applies to the following versions of Splunk: 3.2 , 3.2.1 , 3.2.2 , 3.2.3 , 3.2.4 , 3.2.5 , 3.2.6 View the Article History for its revisions.


You must be logged into splunk.com in order to post comments. Log in now.

Was this documentation topic helpful?

If you'd like to hear back from us, please provide your email address:

We'd love to hear what you think about this topic or the documentation as a whole. Feedback you enter here will be delivered to the documentation team.