Splunk Enterprise version 6.x is no longer supported as of October 23, 2019. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk.
Click here for the latest version.

Introspection endpoint examples
data/index-volumes GET
XML
XML Request
curl -k -u admin:passwd https://localhost:8089/services/data/index-volumes
XML Response
. . . <title>introspection--disk-objects--volumes</title> <id>https://localhost:8089/services/data/index-volumes</id> <updated>2014-03-25T14:41:09-07:00</updated> <generator build="200839" version="6.1"/> <author> <name>Splunk</name> </author> ... opensearch elements elided ... <s:messages/> <entry> <title>_splunk_summaries</title> <id>https://localhost:8089/services/data/index-volumes/_splunk_summaries</id> <updated>2014-03-25T14:41:09-07:00</updated> <link href="/services/data/index-volumes/_splunk_summaries" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/data/index-volumes/_splunk_summaries" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="eai:acl"> ... elided ... </s:key> <s:key name="max_size">infinite</s:key> <s:key name="name">_splunk_summaries</s:key> </s:dict> </content> </entry>
data/index-volumes/{name} GET
XML
XML Request
curl -k -u admin:passwd https://localhost:8089/services/data/index-volumes/_splunk_summaries
XML Response
. . . <title>introspection--disk-objects--volumes</title> <id>https://localhost:8089/services/data/index-volumes</id> <updated>2014-03-27T14:35:26-07:00</updated> <generator build="200839" version="6.1"/> <author> <name>Splunk</name> </author> ... opensearch elements elided ... <s:messages/> <entry> <title>_splunk_summaries</title> <id>https://localhost:8089/services/data/index-volumes/_splunk_summaries</id> <updated>2014-03-27T14:35:26-07:00</updated> <link href="/services/data/index-volumes/_splunk_summaries" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/data/index-volumes/_splunk_summaries" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="eai:acl"> ... elided ... </s:key> <s:key name="eai:attributes">... elided ...</s:key> <s:key name="max_size">infinite</s:key> <s:key name="name">_splunk_summaries</s:key> </s:dict> </content> </entry>
data/indexes GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/data/indexes
XML Response
. . . <title>indexes</title> <id>https://localhost:8089/services/data/indexes</id> <updated>2011-07-11T18:09:22-07:00</updated> <generator version="102807"/> <author> <name>Splunk</name> </author> <link href="/services/data/indexes/_new" rel="create"/> <link href="/services/data/indexes/_reload" rel="_reload"/> ... opensearch elements elided ... <s:messages/> <entry> <title>_audit</title> <id>https://localhost:8089/servicesNS/nobody/system/data/indexes/_audit</id> <updated>2011-07-11T18:09:22-07:00</updated> <link href="/servicesNS/nobody/system/data/indexes/_audit" rel="alternate"/> <author> <name>nobody</name> </author> <link href="/servicesNS/nobody/system/data/indexes/_audit" rel="list"/> <link href="/servicesNS/nobody/system/data/indexes/_audit/_reload" rel="_reload"/> <link href="/servicesNS/nobody/system/data/indexes/_audit" rel="edit"/> <link href="/servicesNS/nobody/system/data/indexes/_audit/disable" rel="disable"/> <content type="text/xml"> <s:dict> <s:key name="assureUTF8">0</s:key> <s:key name="blockSignSize">0</s:key> <s:key name="blockSignatureDatabase">_blocksignature</s:key> <s:key name="coldPath">$SPLUNK_DB/audit/colddb</s:key> <s:key name="coldPath_expanded">/home/amrit/temp/curl/splunk/var/lib/splunk/audit/colddb</s:key> <s:key name="coldToFrozenDir"/> <s:key name="coldToFrozenScript"/> <s:key name="compressRawdata">1</s:key> <s:key name="currentDBSizeMB">1</s:key> <s:key name="defaultDatabase">main</s:key> <s:key name="disabled">0</s:key> ... eai:acl element elided ... <s:key name="enableRealtimeSearch">1</s:key> <s:key name="frozenTimePeriodInSecs">188697600</s:key> <s:key name="homePath">$SPLUNK_DB/audit/db</s:key> <s:key name="homePath_expanded">/home/amrit/temp/curl/splunk/var/lib/splunk/audit/db</s:key> <s:key name="indexThreads">auto</s:key> <s:key name="isInternal">1</s:key> <s:key name="lastInitTime">1310432962.424512</s:key> <s:key name="maxConcurrentOptimizes">3</s:key> <s:key name="maxDataSize">auto</s:key> <s:key name="maxHotBuckets">3</s:key> <s:key name="maxHotIdleSecs">0</s:key> <s:key name="maxHotSpanSecs">7776000</s:key> <s:key name="maxMemMB">5</s:key> <s:key name="maxMetaEntries">1000000</s:key> <s:key name="maxRunningProcessGroups">20</s:key> <s:key name="maxTime">2011-07-10T22:20:53-0700</s:key> <s:key name="maxTotalDataSizeMB">500000</s:key> <s:key name="maxWarmDBCount">300</s:key> <s:key name="memPoolMB">auto</s:key> <s:key name="minRawFileSyncSecs">disable</s:key> <s:key name="minTime">2011-07-10T14:33:00-0700</s:key> <s:key name="partialServiceMetaPeriod">0</s:key> <s:key name="quarantineFutureSecs">2592000</s:key> <s:key name="quarantinePastSecs">77760000</s:key> <s:key name="rawChunkSizeBytes">131072</s:key> <s:key name="rotatePeriodInSecs">60</s:key> <s:key name="serviceMetaPeriod">25</s:key> <s:key name="suppressBannerList"/> <s:key name="sync">0</s:key> <s:key name="syncMeta">1</s:key> <s:key name="thawedPath">$SPLUNK_DB/audit/thaweddb</s:key> <s:key name="thawedPath_expanded">/home/amrit/temp/curl/splunk/var/lib/splunk/audit/thaweddb</s:key> <s:key name="throttleCheckPeriod">15</s:key> <s:key name="totalEventCount">230</s:key> </s:dict> </content> </entry>
data/indexes POST
XML
XML Request
curl -k -u admin:pass https://localhost:8089/servicesNS/admin/search/data/indexes -d name=Shadow
XML Response
. . . <title>indexes</title> <id>https://localhost:8089/servicesNS/admin/search/data/indexes</id> <updated>2011-05-13T13:09:27-07:00</updated> <generator version="98392"/> <author> <name>Splunk</name> </author> <link href="/servicesNS/admin/search/data/indexes/_new" rel="create"/> <link href="/servicesNS/admin/search/data/indexes/_reload" rel="_reload"/> ... opensearch elements elided ... <s:messages/> <entry> <title>shadow</title> <id>https://localhost:8089/servicesNS/nobody/search/data/indexes/shadow</id> <updated>2011-05-13T13:09:27-07:00</updated> <link href="/servicesNS/nobody/search/data/indexes/shadow" rel="alternate"/> <author> <name>nobody</name> </author> <link href="/servicesNS/nobody/search/data/indexes/shadow" rel="list"/> <link href="/servicesNS/nobody/search/data/indexes/shadow/_reload" rel="_reload"/> <link href="/servicesNS/nobody/search/data/indexes/shadow" rel="edit"/> <content type="text/xml"> <s:dict> <s:key name="assureUTF8">0</s:key> <s:key name="blockSignSize">0</s:key> <s:key name="blockSignatureDatabase">_blocksignature</s:key> <s:key name="coldPath">$SPLUNK_DB/shadow/colddb</s:key> <s:key name="coldPath_expanded">/Applications/splunk/var/lib/splunk/shadow/colddb</s:key> <s:key name="coldToFrozenDir"></s:key> <s:key name="coldToFrozenScript"></s:key> <s:key name="compressRawdata">1</s:key> <s:key name="currentDBSizeMB">1</s:key> <s:key name="defaultDatabase">main</s:key> <s:key name="eai:acl">. . .</s:key> <s:key name="enableRealtimeSearch">1</s:key> <s:key name="frozenTimePeriodInSecs">188697600</s:key> <s:key name="homePath">$SPLUNK_DB/shadow/db</s:key> <s:key name="homePath_expanded">/Applications/splunk/var/lib/splunk/shadow/db</s:key> <s:key name="indexThreads">auto</s:key> <s:key name="isInternal">0</s:key> <s:key name="lastInitTime">1305317367.331268</s:key> <s:key name="maxConcurrentOptimizes">3</s:key> <s:key name="maxDataSize">auto</s:key> <s:key name="maxHotBuckets">3</s:key> <s:key name="maxHotIdleSecs">0</s:key> <s:key name="maxHotSpanSecs">7776000</s:key> <s:key name="maxMemMB">5</s:key> <s:key name="maxMetaEntries">1000000</s:key> <s:key name="maxTime"></s:key> <s:key name="maxTotalDataSizeMB">500000</s:key> <s:key name="maxWarmDBCount">300</s:key> <s:key name="memPoolMB">auto</s:key> <s:key name="minRawFileSyncSecs">disable</s:key> <s:key name="minTime"></s:key> <s:key name="partialServiceMetaPeriod">0</s:key> <s:key name="quarantineFutureSecs">2592000</s:key> <s:key name="quarantinePastSecs">77760000</s:key> <s:key name="rawChunkSizeBytes">131072</s:key> <s:key name="rotatePeriodInSecs">60</s:key> <s:key name="serviceMetaPeriod">25</s:key> <s:key name="suppressBannerList"></s:key> <s:key name="sync">0</s:key> <s:key name="syncMeta">1</s:key> <s:key name="thawedPath">$SPLUNK_DB/shadow/thaweddb</s:key> <s:key name="thawedPath_expanded">/Applications/splunk/var/lib/splunk/shadow/thaweddb</s:key> <s:key name="throttleCheckPeriod">15</s:key> <s:key name="totalEventCount">0</s:key> </s:dict> </content> </entry>
data/indexes/{name} DELETE
XML
XML Request
curl -k -u admin:pass --request DELETE https://localhost:8089/services/data/indexes/shadow
XML Response
. . . <title>indexes</title> <id>https://localhost:8089/services/data/indexes</id> <updated>2012-08-02T11:10:16-07:00</updated> <generator build="131547" version="5.0"/> <author> <name>Splunk</name> </author> <link href="/services/data/indexes/_new" rel="create"/> <link href="/services/data/indexes/_reload" rel="_reload"/> ... opensearch elements elided ... <s:messages/>
data/indexes/{name} GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/servicesNS/nobody/search/data/indexes/shadow
XML Response
. . . <title>indexes</title> <id>https://localhost:8089/servicesNS/nobody/search/data/indexes</id> <updated>2011-08-01T12:25:34-07:00</updated> <generator version="105103"/> <author> <name>Splunk</name> </author> <link href="/servicesNS/nobody/search/data/indexes/_new" rel="create"/> <link href="/servicesNS/nobody/search/data/indexes/_reload" rel="_reload"/> ... opensearch elements elided ... <s:messages/> <entry> <title>shadow</title> <id>https://localhost:8089/servicesNS/nobody/search/data/indexes/shadow</id> <updated>2011-08-01T11:47:55-07:00</updated> <link href="/servicesNS/nobody/search/data/indexes/shadow" rel="alternate"/> <author> <name>nobody</name> </author> <link href="/servicesNS/nobody/search/data/indexes/shadow" rel="list"/> <link href="/servicesNS/nobody/search/data/indexes/shadow/_reload" rel="_reload"/> <link href="/servicesNS/nobody/search/data/indexes/shadow" rel="edit"/> <link href="/servicesNS/nobody/search/data/indexes/shadow/disable" rel="disable"/> <content type="text/xml"> <s:dict> <s:key name="assureUTF8">0</s:key> <s:key name="blockSignSize">0</s:key> <s:key name="blockSignatureDatabase">_blocksignature</s:key> <s:key name="bloomfilterTotalSizeKB">0</s:key> <s:key name="coldPath">$SPLUNK_DB/shadow/colddb</s:key> <s:key name="coldPath_expanded">/home/amrit/bin/splunk-current/var/lib/splunk/shadow/colddb</s:key> <s:key name="coldToFrozenDir"/> <s:key name="coldToFrozenScript"/> <s:key name="compressRawdata">1</s:key> <s:key name="currentDBSizeMB">1</s:key> <s:key name="defaultDatabase">main</s:key> <s:key name="disabled">0</s:key> ...eai:acl element elided ... <s:key name="eai:attributes"> <s:dict> <s:key name="optionalFields"> <s:list> <s:item>assureUTF8</s:item> <s:item>blockSignSize</s:item> <s:item>coldToFrozenDir</s:item> <s:item>coldToFrozenScript</s:item> <s:item>compressRawdata</s:item> <s:item>frozenTimePeriodInSecs</s:item> <s:item>maxConcurrentOptimizes</s:item> <s:item>maxDataSize</s:item> <s:item>maxHotBuckets</s:item> <s:item>maxHotIdleSecs</s:item> <s:item>maxHotSpanSecs</s:item> <s:item>maxMemMB</s:item> <s:item>maxMetaEntries</s:item> <s:item>maxRunningProcessGroups</s:item> <s:item>maxTotalDataSizeMB</s:item> <s:item>maxWarmDBCount</s:item> <s:item>minRawFileSyncSecs</s:item> <s:item>partialServiceMetaPeriod</s:item> <s:item>quarantineFutureSecs</s:item> <s:item>quarantinePastSecs</s:item> <s:item>rawChunkSizeBytes</s:item> <s:item>rotatePeriodInSecs</s:item> <s:item>serviceMetaPeriod</s:item> <s:item>suppressBannerList</s:item> <s:item>syncMeta</s:item> <s:item>throttleCheckPeriod</s:item> </s:list> </s:key> <s:key name="requiredFields"> <s:list/> </s:key> <s:key name="wildcardFields"> <s:list/> </s:key> </s:dict> </s:key> <s:key name="enableRealtimeSearch">1</s:key> <s:key name="frozenTimePeriodInSecs">188697600</s:key> <s:key name="homePath">$SPLUNK_DB/shadow/db</s:key> <s:key name="homePath_expanded">/home/amrit/bin/splunk-current/var/lib/splunk/shadow/db</s:key> <s:key name="indexThreads">auto</s:key> <s:key name="isInternal">0</s:key> <s:key name="lastInitTime">1312226552.102920</s:key> <s:key name="maxConcurrentOptimizes">3</s:key> <s:key name="maxDataSize">auto</s:key> <s:key name="maxHotBuckets">3</s:key> <s:key name="maxHotIdleSecs">0</s:key> <s:key name="maxHotSpanSecs">7776000</s:key> <s:key name="maxMemMB">5</s:key> <s:key name="maxMetaEntries">1000000</s:key> <s:key name="maxRunningProcessGroups">20</s:key> <s:key name="maxTime"/> <s:key name="maxTotalDataSizeMB">500000</s:key> <s:key name="maxWarmDBCount">300</s:key> <s:key name="memPoolMB">auto</s:key> <s:key name="minRawFileSyncSecs">disable</s:key> <s:key name="minTime"/> <s:key name="numBloomfilters">0</s:key> <s:key name="numHotBuckets">0</s:key> <s:key name="numWarmBuckets">0</s:key> <s:key name="partialServiceMetaPeriod">0</s:key> <s:key name="quarantineFutureSecs">2592000</s:key> <s:key name="quarantinePastSecs">77760000</s:key> <s:key name="rawChunkSizeBytes">131072</s:key> <s:key name="rotatePeriodInSecs">60</s:key> <s:key name="serviceMetaPeriod">25</s:key> <s:key name="suppressBannerList"/> <s:key name="sync">0</s:key> <s:key name="syncMeta">1</s:key> <s:key name="thawedPath">$SPLUNK_DB/shadow/thaweddb</s:key> <s:key name="thawedPath_expanded">/home/amrit/bin/splunk-current/var/lib/splunk/shadow/thaweddb</s:key> <s:key name="throttleCheckPeriod">15</s:key> <s:key name="totalEventCount">0</s:key> </s:dict> </content> </entry>
data/indexes/{name} POST
XML
XML Request
curl -k -u admin:pass -d maxTotalDataSizeMB=400000 https://localhost:8089/servicesNS/nobody/search/data/indexes/shadow
XML Response
. . . <title>indexes</title> <id>https://localhost:8089/servicesNS/nobody/search/data/indexes</id> <updated>2011-05-16T12:20:06-07:00</updated> <generator version="98392"/> <author> <name>Splunk</name> </author> <link href="/servicesNS/nobody/search/data/indexes/_new" rel="create"/> <link href="/servicesNS/nobody/search/data/indexes/_reload" rel="_reload"/> ... opensearch elements elided ... <s:messages/> <entry> <title>shadow</title> <id>https://localhost:8089/servicesNS/nobody/search/data/indexes/shadow</id> <updated>2011-05-16T12:18:56-07:00</updated> <link href="/servicesNS/nobody/search/data/indexes/shadow" rel="alternate"/> <author> <name>nobody</name> </author> <link href="/servicesNS/nobody/search/data/indexes/shadow" rel="list"/> <link href="/servicesNS/nobody/search/data/indexes/shadow/_reload" rel="_reload"/> <link href="/servicesNS/nobody/search/data/indexes/shadow" rel="edit"/> <content type="text/xml"> <s:dict> <s:key name="assureUTF8">0</s:key> <s:key name="blockSignSize">0</s:key> <s:key name="blockSignatureDatabase">_blocksignature</s:key> <s:key name="coldPath">$SPLUNK_DB/shadow/colddb</s:key> <s:key name="coldPath_expanded">/Applications/splunk4.3/var/lib/splunk/shadow/colddb</s:key> <s:key name="coldToFrozenDir"></s:key> <s:key name="coldToFrozenScript"></s:key> <s:key name="compressRawdata">1</s:key> <s:key name="currentDBSizeMB">1</s:key> <s:key name="defaultDatabase">main</s:key> <s:key name="eai:acl">. . .</s:key> <s:key name="enableRealtimeSearch">1</s:key> <s:key name="frozenTimePeriodInSecs">188697600</s:key> <s:key name="homePath">$SPLUNK_DB/shadow/db</s:key> <s:key name="homePath_expanded">/Applications/splunk4.3/var/lib/splunk/shadow/db</s:key> <s:key name="indexThreads">auto</s:key> <s:key name="isInternal">0</s:key> <s:key name="lastInitTime">1305573611.118477</s:key> <s:key name="maxConcurrentOptimizes">3</s:key> <s:key name="maxDataSize">auto</s:key> <s:key name="maxHotBuckets">3</s:key> <s:key name="maxHotIdleSecs">0</s:key> <s:key name="maxHotSpanSecs">7776000</s:key> <s:key name="maxMemMB">5</s:key> <s:key name="maxMetaEntries">1000000</s:key> <s:key name="maxTime"></s:key> <s:key name="maxTotalDataSizeMB">400000</s:key> <s:key name="maxWarmDBCount">300</s:key> <s:key name="memPoolMB">auto</s:key> <s:key name="minRawFileSyncSecs">disable</s:key> <s:key name="minTime"></s:key> <s:key name="partialServiceMetaPeriod">0</s:key> <s:key name="quarantineFutureSecs">2592000</s:key> <s:key name="quarantinePastSecs">77760000</s:key> <s:key name="rawChunkSizeBytes">131072</s:key> <s:key name="rotatePeriodInSecs">60</s:key> <s:key name="serviceMetaPeriod">25</s:key> <s:key name="suppressBannerList"></s:key> <s:key name="sync">0</s:key> <s:key name="syncMeta">1</s:key> <s:key name="thawedPath">$SPLUNK_DB/shadow/thaweddb</s:key> <s:key name="thawedPath_expanded">/Applications/splunk4.3/var/lib/splunk/shadow/thaweddb</s:key> <s:key name="throttleCheckPeriod">15</s:key> <s:key name="totalEventCount">0</s:key> </s:dict> </content> </entry>
data/indexes-extended GET
XML
XML Request
curl -k -u admin:passwd https://localhost:8089/services/data/indexes-extended
XML Response
. . . <title>introspection--disk-objects--indexes</title> <id>https://localhost:8089/services/data/indexes-extended</id> <updated>2014-03-31T12:41:09-07:00</updated> <generator build="200839" version="6.1"/> <author> <name>Splunk</name> </author> ... opensearch elements elided ... <s:messages/> <entry> <title>_audit</title> <id>https://localhost:8089/services/data/indexes-extended/_audit</id> <updated>2014-03-31T12:41:09-07:00</updated> <link href="/services/data/indexes-extended/_audit" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/data/indexes-extended/_audit" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="bucket_dirs"> <s:dict> <s:key name="cold"> <s:dict> <s:key name="bucket_count">0</s:key> <s:key name="size">0.000</s:key> </s:dict> </s:key> <s:key name="home"> <s:dict> <s:key name="event_count">6169</s:key> <s:key name="event_max_time">1395246673</s:key> <s:key name="event_min_time">1394732683</s:key> <s:key name="hot_bucket_count">1</s:key> <s:key name="size">1.000</s:key> <s:key name="warm_bucket_count">5</s:key> </s:dict> </s:key> <s:key name="thawed"> <s:dict> <s:key name="bucket_count">0</s:key> <s:key name="size">0.000</s:key> </s:dict> </s:key> </s:dict> </s:key> <s:key name="eai:acl"> ... elided ... </s:key> <s:key name="name">_audit</s:key> <s:key name="total_bucket_count">6</s:key> <s:key name="total_event_count">18096</s:key> <s:key name="total_raw_size">1.000</s:key> <s:key name="total_size">1.000</s:key> </s:dict> </content> </entry> . . . elided . . . <entry> <title>summary</title> <id>https://localhost:8089/services/data/indexes-extended/summary</id> <updated>2014-03-31T12:41:09-07:00</updated> <link href="/services/data/indexes-extended/summary" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/data/indexes-extended/summary" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="eai:acl"> ... elided ... </s:key> <s:key name="name">summary</s:key> <s:key name="total_size">0.000</s:key> </s:dict> </content> </entry>
data/indexes-extended/{name} GET
XML
XML Request
curl -k -u admin:passwd https://localhost:8089/services/data/indexes-extended/history
XML Response
. . . <title>introspection--disk-objects--indexes</title> <id>https://localhost:8089/services/data/indexes-extended</id> <updated>2014-03-31T12:42:29-07:00</updated> <generator build="200839" version="6.1"/> <author> <name>Splunk</name> </author> ... opensearch elements elided ... <s:messages/> <entry> <title>_internal</title> <id>https://localhost:8089/services/data/indexes-extended/_internal</id> <updated>2014-03-31T12:42:29-07:00</updated> <link href="/services/data/indexes-extended/_internal" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/data/indexes-extended/_internal" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="bucket_dirs"> <s:dict> <s:key name="cold"> <s:dict> <s:key name="bucket_count">0</s:key> <s:key name="size">0.000</s:key> </s:dict> </s:key> <s:key name="home"> <s:dict> <s:key name="event_count">180492</s:key> <s:key name="event_max_time">1395246673</s:key> <s:key name="event_min_time">1392167582</s:key> <s:key name="hot_bucket_count">3</s:key> <s:key name="size">9.000</s:key> <s:key name="warm_bucket_count">6</s:key> </s:dict> </s:key> <s:key name="thawed"> <s:dict> <s:key name="bucket_count">0</s:key> <s:key name="size">0.000</s:key> </s:dict> </s:key> </s:dict> </s:key> <s:key name="eai:acl"> ... elided ... </s:key> <s:key name="eai:attributes"> ... elided ... </s:key> <s:key name="name">_internal</s:key> <s:key name="total_bucket_count">9</s:key> <s:key name="total_event_count">556322</s:key> <s:key name="total_raw_size">28.000</s:key> <s:key name="total_size">22.000</s:key> </s:dict> </content> </entry>
server/info GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/info
XML Response
. . . <title>server-info</title> <id>https://localhost:8089/services/server/info</id> <updated>2014-08-04T15:48:10-07:00</updated> <generator build="221120" version="6.2"/> <author> <name>Splunk</name> </author> ... opensearch nodes elided ... <s:messages/> <entry> <title>server-info</title> <id>https://localhost:8089/services/server/info/server-info</id> <updated>2014-08-04T15:48:10-07:00</updated> <link href="/services/server/info/server-info" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/info/server-info" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="activeLicenseGroup">Enterprise</s:key> <s:key name="addOns"> <s:dict> <s:key name="hadoop"> <s:dict> <s:key name="parameters"> <s:dict> <s:key name="erp_type">report</s:key> <s:key name="maxNodes">10</s:key> </s:dict> </s:key> <s:key name="type">external_results_provider</s:key> </s:dict> </s:key> </s:dict> </s:key> <s:key name="build">221120</s:key> <s:key name="cpu_arch">x64</s:key> <s:key name="eai:acl"> ... elided ... </s:key> <s:key name="guid">9CBD8473-4E7D-4FF2-A042-050C5C27C298</s:key> <s:key name="host">myHostName</s:key> <s:key name="host_fqdn">myHostName</s:key> <s:key name="isFree">0</s:key> <s:key name="isTrial">0</s:key> <s:key name="kv_store_status">Could not find task executor for type 'kv_store_status'</s:key> <s:key name="licenseKeys"> <s:list> <s:item>31BB75AA379A50F9225471053337B6E438C4C7A1F42A905AB93AF16C9A12124E</s:item> </s:list> </s:key> <s:key name="licenseSignature">2f121cff440e115470154cdf92e208b5</s:key> <s:key name="licenseState">OK</s:key> <s:key name="license_labels"> <s:list> <s:item>Splunk xyz License</s:item> </s:list> </s:key> <s:key name="master_guid">9CBD8473-4E7D-4FF2-A042-050C5C27C298</s:key> <s:key name="max_users">4294967295</s:key> <s:key name="mode">normal</s:key> <s:key name="numberOfCores">2</s:key> <s:key name="os_build">6</s:key> <s:key name="os_name">Windows</s:key> <s:key name="os_version">1</s:key> <s:key name="physicalMemoryMB">3982</s:key> <s:key name="product_type">splunk</s:key> <s:key name="rtsearch_enabled">1</s:key> <s:key name="serverName">myHostName</s:key> <s:key name="server_roles"> <s:dict> <s:key name="indexer"/> <s:key name="license_master"/> <s:key name="management_console"/> </s:dict> </s:key> <s:key name="startup_time">1407182814</s:key> <s:key name="version">6.2</s:key> </s:dict> </content> </entry>
server/introspection GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/introspection
XML Response
. . . <title></title> <id>https://localhost:8089/services/server/introspection</id> <updated>2014-08-04T11:40:23-07:00</updated> <generator build="221120" version="6.2"/> <author> <name>Splunk</name> </author> <s:messages/> <entry> <title>indexer</title> <id>https://localhost:8089/services/server/introspection/indexer</id> <updated>2014-08-04T11:40:23-07:00</updated> <link href="/services/server/introspection/indexer" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/indexer" rel="list"/> <content type="text/xml"> <s:dict/> </content> </entry> <entry> <title>kvstore</title> <id>https://localhost:8089/services/server/introspection/kvstore</id> <updated>2014-08-04T11:40:23-07:00</updated> <link href="/services/server/introspection/kvstore" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/kvstore" rel="list"/> <link href="/services/server/introspection/kvstore/_reload" rel="_reload"/> <content type="text/xml"> <s:dict/> </content> </entry> <entry> <title>pipelines</title> <id>https://localhost:8089/services/server/introspection/pipelines</id> <updated>2014-08-04T11:40:23-07:00</updated> <link href="/services/server/introspection/pipelines" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/pipelines" rel="list"/> <content type="text/xml"> <s:dict/> </content> </entry> <entry> <title>processors</title> <id>https://localhost:8089/services/server/introspection/processors</id> <updated>2014-08-04T11:40:23-07:00</updated> <link href="/services/server/introspection/processors" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/processors" rel="list"/> <content type="text/xml"> <s:dict/> </content> </entry> <entry> <title>queues</title> <id>https://localhost:8089/services/server/introspection/queues</id> <updated>2014-08-04T11:40:23-07:00</updated> <link href="/services/server/introspection/queues" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/queues" rel="list"/> <content type="text/xml"> <s:dict/> </content> </entry>
server/introspection/indexer GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/introspection/indexer
XML Response
. . . <title>introspection-indexer</title> <id>https://localhost:8089/services/server/introspection/indexer</id> <updated>2014-08-04T11:43:04-07:00</updated> <generator build="221120" version="6.2"/> <author> <name>Splunk</name> </author> <opensearch:totalResults>1</opensearch:totalResults> <opensearch:itemsPerPage>30</opensearch:itemsPerPage> <opensearch:startIndex>0</opensearch:startIndex> <s:messages/> <entry> <title>indexer</title> <id>https://localhost:8089/services/server/introspection/indexer/indexer</id> <updated>2014-08-04T11:43:04-07:00</updated> <link href="/services/server/introspection/indexer/indexer" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/indexer/indexer" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="average_KBps">0.517667</s:key> <s:key name="eai:acl">... elided ...</s:key> <s:key name="reason">.</s:key> <s:key name="status">nominal</s:key> </s:dict> </content> </entry>
server/introspection/kvstore GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/introspection/kvstore
XML Response
. . . <title></title> <id>https://localhost:8089/services/server/introspection/kvstore</id> <updated>2014-08-20T14:06:12-07:00</updated> <generator build="221120" version="6.2"/> <author> <name>Splunk</name> </author> <s:messages/> <entry> <title>collectionstats</title> <id>https://localhost:8089/services/server/introspection/kvstore/collectionstats</id> <updated>2014-08-20T14:06:12-07:00</updated> <link href="/services/server/introspection/kvstore/collectionstats" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/kvstore/collectionstats" rel="list"/> <content type="text/xml"> <s:dict/> </content> </entry> <entry> <title>replicasetstats</title> <id>https://localhost:8089/services/server/introspection/kvstore/replicasetstats</id> <updated>2014-08-20T14:06:12-07:00</updated> <link href="/services/server/introspection/kvstore/replicasetstats" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/kvstore/replicasetstats" rel="list"/> <content type="text/xml"> <s:dict/> </content> </entry> <entry> <title>serverstatus</title> <id>https://localhost:8089/services/server/introspection/kvstore/serverstatus</id> <updated>2014-08-20T14:06:12-07:00</updated> <link href="/services/server/introspection/kvstore/serverstatus" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/kvstore/serverstatus" rel="list"/> <content type="text/xml"> <s:dict/> </content> </entry>
server/introspection/kvstore/collectionstats GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/introspection/kvstore/collectionstats
XML Response
. . . <title>kvstore-collectionstats</title> <id>https://localhost:8089/services/server/introspection/kvstore/collectionstats</id> <updated>2014-08-20T14:31:42-07:00</updated> <generator build="226873" version="6.2"/> <author> <name>Splunk</name> </author> ... opensearch nodes elided ... <s:messages/> <entry> <title>collectionStats</title> <id>https://localhost:8089/services/server/introspection/kvstore/collectionstats/collectionStats</id> <updated>2014-08-20T14:31:42-07:00</updated> <link href="/services/server/introspection/kvstore/collectionstats/collectionStats" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/kvstore/collectionstats/collectionStats" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="data"> <s:list> <s:item> {"ns":"search.kvstoredemo", "count":0, "size":0, "storageSize":8192, "numExtents":1, "nindexes":2, "lastExtentSize":8192, "paddingFactor":1, "systemFlags":1, "userFlags":1, "totalIndexSize":16352, "indexSizes":{"_id_":8176,"_UserAndKeyUniqueIndex":8176}, "ok":1} </s:item> </s:list> </s:key> <s:key name="eai:acl"> ... elided ...</s:key> </s:dict> </content> </entry>
server/introspection/kvstore/replicasetstats GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/introspection/kvstore/replicasetstats
XML Response
. . . <title>kvstore-collectionstats</title> <id>https://localhost:8089/services/server/introspection/kvstore/collectionstats</id> <updated>2014-08-20T14:31:42-07:00</updated> <generator build="226873" version="6.2"/> <author> <name>Splunk</name> </author> ... opensearch nodes elided ... <s:messages/> <entry> <title>replicasetstats</title> <id>https://localhost:8089/services/server/introspection/kvstore/replicasetstats/replicasetstats</id> <updated>2014-08-20T14:31:42-07:00</updated> <link href="/services/server/introspection/kvstore/replicasetstats/replicasetstats" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/kvstore/replicasetstats/replicasetstats" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="data"> <s:list> <s:item> { "replSetStats": { "set": "splunkrs", "date": 1412203576000, "myState": 2, "syncingTo": "54.xxx.xxx.xxx:8191", "members": [ { "_id": 2, "name": "54.xxx.xxx.xxx:8191", "health": 1, "state": 2, "stateStr": "SECONDARY", "uptime": 102409, "optime": { "t": 1412101153, "i": 1 }, "optimeDate": 1412101153000, "lastHeartbeat": 1412203575000, "lastHeartbeatRecv": 1412203575000, "pingMs": 1, "syncingTo": "54.xxx.xxx.xxx:8191" }, { "_id": 3, "name": "54.xxx.xxx.yyy:8191", "health": 1, "state": 2, "stateStr": "SECONDARY", "uptime": 102409, "optime": { "t": 1412101153, "i": 1 }, "optimeDate": 1412101153000, "lastHeartbeat": 1412203576000, "lastHeartbeatRecv": 1412203575000, "pingMs": 1, "syncingTo": "54.xxx.xxx.yyy:8191" }, . . . elided . . . { "_id": 17, "name": "54.xxx.xxx.zzz:8191", "health": 1, "state": 2, "stateStr": "SECONDARY", "uptime": 102409, "optime": { "t": 1412101153, "i": 1 }, "optimeDate": 1412101153000, "lastHeartbeat": 1412203574000, "lastHeartbeatRecv": 1412203575000, "pingMs": 1, "syncingTo": "54.xxx.xxx.zzz:8191" } ], "ok": 1 }, "oplogInfo": { "start": 1412022009000, "end": 1412101153000, "collectionStats": { "ns": "local.oplog.rs", "count": 631, "size": 166964, "avgObjSize": 264, "storageSize": 1048580080, "numExtents": 3, "nindexes": 0, "lastExtentSize": 4096, "paddingFactor": 1, "systemFlags": 0, "userFlags": 0, "totalIndexSize": 0, "indexSizes": {}, "capped": true, "max": 9223372036854775808.000000, "ok": 1 }, "sources": {} } } </s:item> </s:list> </s:key> <s:key name="eai:acl"> ... elided ...</s:key> </s:dict> </content> </entry>
server/introspection/kvstore/serverstatus GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/introspection/kvstore/serverstatus
XML Response
. . . <title>kvstore-serverstatus</title> <id>https://localhost:8089/services/server/introspection/kvstore/serverstatus</id> <updated>2014-08-20T14:26:42-07:00</updated> <generator build="226873" version="6.2"/> <author> <name>Splunk</name> </author> ... opensearch nodes elided ... <s:messages/> <entry> <title>serverStatus</title> <id>https://localhost:8089/services/server/introspection/kvstore/serverstatus/serverStatus</id> <updated>2014-08-20T14:26:42-07:00</updated> <link href="/services/server/introspection/kvstore/serverstatus/serverStatus" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/kvstore/serverstatus/serverStatus" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="data"> <![CDATA[{ "host":"localhost:8089", "version":"2.6.3", "pid":23009, "uptime":19049, "uptimeMillis":19049447, "uptimeEstimate":18295, "localTime":{"$date":1408570002615}, "asserts":{ "regular":0, "warning":0, "msg":0, "user":0, "rollovers":0}, "backgroundFlushing":{ "flushes":317, "total_ms":11523, "average_ms":36.350158, "last_ms":0, "last_finished":{"$date":1408569973325}}, "connections":{ "current":7, "available":3269, "totalCreated":7}, "cursors":{ "note":"deprecated, use server status metrics", "clientCursors_size":0, "totalOpen":0, "pinned":0, "totalNoTimeout":0, "timedOut":0}, "dur":{ "commits":30, "journaledMB":0, "writeToDataFilesMB":0, "compression":0, "commitsInWriteLock":0, "earlyCommits":0, "timeMs":{ "dt":3072, "prepLogBuffer":0, "writeToJournal":0, "writeToDataFiles":0, "remapPrivateView":0}}, "extra_info":{ "note":"fields vary by platform", "heap_usage_bytes":67624592, "page_faults":3}, "globalLock":{ "totalTime":19049447000, "lockTime":1491098, "currentQueue":{ "total":0, "readers":0, "writers":0}, "activeClients":{ "total":0, "readers":0, "writers":0}}, "indexCounters":{ "accesses":2, "hits":2, "misses":0, "resets":0, "missRatio":0}, "locks":{ ".":{ "timeLockedMicros":{ "R":2926340, "W":1491098}, "timeAcquiringMicros":{ "R":1458997, "W":342703}}, "admin":{ "timeLockedMicros":{ "r":103638, "w":0}, "timeAcquiringMicros":{ "r":13202, "w":0}}, "local":{ "timeLockedMicros":{ "r":426518, "w":237}, "timeAcquiringMicros":{ "r":185505, "w":12}}, "search.kvstoredemo":{ "timeLockedMicros":{ "r":2832888, "w":292}, "timeAcquiringMicros":{ "r":1310820, "w":17}}}, "network":{ "bytesIn":1133611, "bytesOut":11628162, "numRequests":12070}, "opcounters":{ "insert":1, "query":4760, "update":0, "delete":0, "getmore":0, "command":8264}, "opcountersRepl":{ "insert":0, "query":0, "update":0, "delete":0, "getmore":0, "command":0}, "recordStats":{ "accessesNotInMemory":0, "pageFaultExceptionsThrown":0, "admin":{ "accessesNotInMemory":0, "pageFaultExceptionsThrown":0}, "local":{ "accessesNotInMemory":0, "pageFaultExceptionsThrown":0}, "search.kvstoredemo":{ "accessesNotInMemory":0, "pageFaultExceptionsThrown":0}}, "writeBacksQueued":false, "mem":{ "bits":64, "resident":58, "virtual":325, "supported":true, "mapped":64, "mappedWithJournal":128}, "metrics":{ "cursor":{ "timedOut":0, "open":{ "noTimeout":0, "pinned":0, "total":0}}, "document":{ "deleted":0, "inserted":1, "returned":2, "updated":0}, "getLastError":{ "wtime":{ "num":0, "totalMillis":0}, "wtimeouts":0}, "operation":{ "fastmod":0, "idhack":0, "scanAndOrder":0}, "queryExecutor":{ "scanned":0, "scannedObjects":0}, "record":{"moves":0}, "repl":{ "apply":{ "batches":{ "num":0, "totalMillis":0}, "ops":0}, "buffer":{ "count":0, "maxSizeBytes":268435456, "sizeBytes":0}, "network":{ "bytes":0, "getmores":{ "num":0, "totalMillis":0}, "ops":0, "readersCreated":0}, "preload":{ "docs":{ "num":0, "totalMillis":0}, "indexes":{ "num":0, "totalMillis":0}}}, "storage":{ "freelist":{ "search":{ "bucketExhausted":0, "requests":0, "scanned":0}}}, "ttl":{ "deletedDocuments":0, "passes":317}}, "ok":1}]]> </s:key> <s:key name="eai:acl"> ... elided ... </s:key> </s:dict> </content> </entry>
server/introspection/search/dispatch GET
XML
XML Request
curl -k -u username:password https://localhost:8089/services/server/introspection/search/dispatch
XML Response
<?xml-stylesheet type="text/xml" href="/static/atom.xsl"?> <feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/"> <title>introspection-dispatchreaper</title> <id>https://localhost:8089/services/server/introspection/search/dispatch</id> <updated>2015-08-27T13:49:04-07:00</updated> <generator build="ced4408678cc212328ba3550d23cba87c24339d4" version="20150826"/> <author> <name>Splunk</name> </author> <link href="/services/server/introspection/search/dispatch/_acl" rel="_acl"/> <opensearch:totalResults>4</opensearch:totalResults> <opensearch:itemsPerPage>30</opensearch:itemsPerPage> <opensearch:startIndex>0</opensearch:startIndex> <s:messages/> <entry> <title>Bundle_Directory_Reaper</title> <id>https://localhost:8089/services/server/introspection/search/dispatch/Bundle_Directory_Reaper</id> <updated>2015-08-27T13:49:04-07:00</updated> <link href="/services/server/introspection/search/dispatch/Bundle_Directory_Reaper" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/search/dispatch/Bundle_Directory_Reaper" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="Bundle_Directory_Reaper_Average_Time(ms)">1.000000</s:key> <s:key name="Bundle_Directory_Reaper_Max_Time(ms)">1</s:key> <s:key name="eai:acl"> <s:dict> <s:key name="app"></s:key> <s:key name="can_list">1</s:key> <s:key name="can_write">1</s:key> <s:key name="modifiable">0</s:key> <s:key name="owner">system</s:key> <s:key name="perms"> <s:dict> <s:key name="read"> <s:list> <s:item>*</s:item> </s:list> </s:key> <s:key name="write"> <s:list> <s:item>*</s:item> </s:list> </s:key> </s:dict> </s:key> <s:key name="removable">0</s:key> <s:key name="sharing">system</s:key> </s:dict> </s:key> </s:dict> </content> </entry> <entry> <title>Compute_User_Search_Quota</title> <id>https://localhost:8089/services/server/introspection/search/dispatch/Compute_User_Search_Quota</id> <updated>2015-08-27T13:49:04-07:00</updated> <link href="/services/server/introspection/search/dispatch/Compute_User_Search_Quota" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/search/dispatch/Compute_User_Search_Quota" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="Compute_User_Search_Quota_Average_Time(ms)">2.500000</s:key> <s:key name="Compute_User_Search_Quota_Max_Time(ms)">4</s:key> <s:key name="eai:acl"> <s:dict> <s:key name="app"></s:key> <s:key name="can_list">1</s:key> <s:key name="can_write">1</s:key> <s:key name="modifiable">0</s:key> <s:key name="owner">system</s:key> <s:key name="perms"> <s:dict> <s:key name="read"> <s:list> <s:item>*</s:item> </s:list> </s:key> <s:key name="write"> <s:list> <s:item>*</s:item> </s:list> </s:key> </s:dict> </s:key> <s:key name="removable">0</s:key> <s:key name="sharing">system</s:key> </s:dict> </s:key> </s:dict> </content> </entry> <entry> <title>Dispatch_Directory_Reaper</title> <id>https://localhost:8089/services/server/introspection/search/dispatch/Dispatch_Directory_Reaper</id> <updated>2015-08-27T13:49:04-07:00</updated> <link href="/services/server/introspection/search/dispatch/Dispatch_Directory_Reaper" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/search/dispatch/Dispatch_Directory_Reaper" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="Dispatch_Directory_Reaper_Average_Time(ms)">5.400000</s:key> <s:key name="Dispatch_Directory_Reaper_Max_Time(ms)">16</s:key> <s:key name="eai:acl"> <s:dict> <s:key name="app"></s:key> <s:key name="can_list">1</s:key> <s:key name="can_write">1</s:key> <s:key name="modifiable">0</s:key> <s:key name="owner">system</s:key> <s:key name="perms"> <s:dict> <s:key name="read"> <s:list> <s:item>*</s:item> </s:list> </s:key> <s:key name="write"> <s:list> <s:item>*</s:item> </s:list> </s:key> </s:dict> </s:key> <s:key name="removable">0</s:key> <s:key name="sharing">system</s:key> </s:dict> </s:key> </s:dict> </content> </entry> <entry> <title>Search_StartUp_Time</title> <id>https://localhost:8089/services/server/introspection/search/dispatch/Search_StartUp_Time</id> <updated>2015-08-27T13:49:04-07:00</updated> <link href="/services/server/introspection/search/dispatch/Search_StartUp_Time" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/search/dispatch/Search_StartUp_Time" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="Search_StartUp_Time_Average_Time(ms)">136.750000</s:key> <s:key name="Search_StartUp_Time_Max_Time(ms)">185</s:key> <s:key name="eai:acl"> <s:dict> <s:key name="app"></s:key> <s:key name="can_list">1</s:key> <s:key name="can_write">1</s:key> <s:key name="modifiable">0</s:key> <s:key name="owner">system</s:key> <s:key name="perms"> <s:dict> <s:key name="read"> <s:list> <s:item>*</s:item> </s:list> </s:key> <s:key name="write"> <s:list> <s:item>*</s:item> </s:list> </s:key> </s:dict> </s:key> <s:key name="removable">0</s:key> <s:key name="sharing">system</s:key> </s:dict> </s:key> </s:dict> </content> </entry> </feed>
server/introspection/search/dispatch/Bundle_Directory_Reaper GET
XML
XML Request
curl -k -u username:password https://localhost:8089/services/server/introspection/search/dispatch/Bundle_Directory_Reaper
XML Response
<?xml-stylesheet type="text/xml" href="/static/atom.xsl"?> <feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/"> <title>introspection-dispatchreaper</title> <id>https://localhost:8089/services/server/introspection/search//dispatch</id> <updated>2015-08-26T14:24:43-07:00</updated> <generator build="ced4408678cc212328ba3550d23cba87c24339d4" version="20150826"/> <author> <name>Splunk</name> </author> <link href="/services/server/introspection/search//dispatch/_acl" rel="_acl"/> <opensearch:totalResults>1</opensearch:totalResults> <opensearch:itemsPerPage>30</opensearch:itemsPerPage> <opensearch:startIndex>0</opensearch:startIndex> <s:messages/> <entry> <title>Bundle_Directory_Reaper</title> <id>https://localhost:8089/services/server/introspection/search//dispatch/Bundle_Directory_Reaper</id> <updated>2015-08-26T14:24:43-07:00</updated> <link href="/services/server/introspection/search//dispatch/Bundle_Directory_Reaper" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/search//dispatch/Bundle_Directory_Reaper" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="Bundle_Directory_Reaper_Average_Time(ms)">1.000000</s:key> <s:key name="Bundle_Directory_Reaper_Max_Time(ms)">1</s:key> <s:key name="eai:acl"> <s:dict> <s:key name="app"></s:key> <s:key name="can_list">0</s:key> <s:key name="can_write">1</s:key> <s:key name="modifiable">0</s:key> <s:key name="owner">system</s:key> <s:key name="perms"> <s:dict> <s:key name="read"> <s:list> <s:item>*</s:item> </s:list> </s:key> <s:key name="write"> <s:list> <s:item>*</s:item> </s:list> </s:key> </s:dict> </s:key> <s:key name="removable">0</s:key> <s:key name="sharing">system</s:key> </s:dict> </s:key> <s:key name="eai:attributes"> <s:dict> <s:key name="optionalFields"> <s:list/> </s:key> <s:key name="requiredFields"> <s:list/> </s:key> <s:key name="wildcardFields"> <s:list/> </s:key> </s:dict> </s:key> </s:dict> </content> </entry> </feed>
server/introspection/search/dispatch/Compute_User_Search_Quota GET
XML
XML Request
curl -k -u username:password https://localhost:8089/services/server/introspection/search/dispatch/Compute_User_Search_Quota
XML Response
<?xml-stylesheet type="text/xml" href="/static/atom.xsl"?> <feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/"> <title>introspection-dispatchreaper</title> <id>https://localhost:8089/services/server/introspection/search/dispatch</id> <updated>2015-08-26T14:33:46-07:00</updated> <generator build="ced4408678cc212328ba3550d23cba87c24339d4" version="20150826"/> <author> <name>Splunk</name> </author> <link href="/services/server/introspection/search/dispatch/_acl" rel="_acl"/> <opensearch:totalResults>1</opensearch:totalResults> <opensearch:itemsPerPage>30</opensearch:itemsPerPage> <opensearch:startIndex>0</opensearch:startIndex> <s:messages/> <entry> <title>Compute_User_Search_Quota</title> <id>https://localhost:8089/services/server/introspection/search/dispatch/Compute_User_Search_Quota</id> <updated>2015-08-26T14:33:46-07:00</updated> <link href="/services/server/introspection/search/dispatch/Compute_User_Search_Quota" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/search/dispatch/Compute_User_Search_Quota" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="Compute_User_Search_Quota_Average_Time(ms)">1.950000</s:key> <s:key name="Compute_User_Search_Quota_Max_Time(ms)">4</s:key> <s:key name="eai:acl"> <s:dict> <s:key name="app"></s:key> <s:key name="can_list">0</s:key> <s:key name="can_write">1</s:key> <s:key name="modifiable">0</s:key> <s:key name="owner">system</s:key> <s:key name="perms"> <s:dict> <s:key name="read"> <s:list> <s:item>*</s:item> </s:list> </s:key> <s:key name="write"> <s:list> <s:item>*</s:item> </s:list> </s:key> </s:dict> </s:key> <s:key name="removable">0</s:key> <s:key name="sharing">system</s:key> </s:dict> </s:key> <s:key name="eai:attributes"> <s:dict> <s:key name="optionalFields"> <s:list/> </s:key> <s:key name="requiredFields"> <s:list/> </s:key> <s:key name="wildcardFields"> <s:list/> </s:key> </s:dict> </s:key> </s:dict> </content> </entry> </feed>
server/introspection/search/dispatch/Dispatch_Directory_Reaper GET
XML
XML Request
curl -k -u username:password https://localhost:8089/services/server/introspection/search/dispatch/Dispatch_Directory_Reaper
XML Response
<?xml-stylesheet type="text/xml" href="/static/atom.xsl"?> <feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/"> <title>introspection-dispatchreaper</title> <id>https://localhost:8089/services/server/introspection/search/dispatch</id> <updated>2015-08-26T14:34:41-07:00</updated> <generator build="ced4408678cc212328ba3550d23cba87c24339d4" version="20150826"/> <author> <name>Splunk</name> </author> <link href="/services/server/introspection/search/dispatch/_acl" rel="_acl"/> <opensearch:totalResults>1</opensearch:totalResults> <opensearch:itemsPerPage>30</opensearch:itemsPerPage> <opensearch:startIndex>0</opensearch:startIndex> <s:messages/> <entry> <title>Dispatch_Directory_Reaper</title> <id>https://localhost:8089/services/server/introspection/search/dispatch/Dispatch_Directory_Reaper</id> <updated>2015-08-26T14:34:41-07:00</updated> <link href="/services/server/introspection/search/dispatch/Dispatch_Directory_Reaper" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/search/dispatch/Dispatch_Directory_Reaper" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="Dispatch_Directory_Reaper_Average_Time(ms)">4.500000</s:key> <s:key name="Dispatch_Directory_Reaper_Max_Time(ms)">10</s:key> <s:key name="eai:acl"> <s:dict> <s:key name="app"></s:key> <s:key name="can_list">0</s:key> <s:key name="can_write">1</s:key> <s:key name="modifiable">0</s:key> <s:key name="owner">system</s:key> <s:key name="perms"> <s:dict> <s:key name="read"> <s:list> <s:item>*</s:item> </s:list> </s:key> <s:key name="write"> <s:list> <s:item>*</s:item> </s:list> </s:key> </s:dict> </s:key> <s:key name="removable">0</s:key> <s:key name="sharing">system</s:key> </s:dict> </s:key> <s:key name="eai:attributes"> <s:dict> <s:key name="optionalFields"> <s:list/> </s:key> <s:key name="requiredFields"> <s:list/> </s:key> <s:key name="wildcardFields"> <s:list/> </s:key> </s:dict> </s:key> </s:dict> </content> </entry> </feed>
server/introspection/search/dispatch/Search_StartUp_Time GET
XML
XML Request
curl -k -u username:password https://localhost:8089/services/server/introspection/search/dispatch/Search_StartUp_Time
XML Response
<?xml-stylesheet type="text/xml" href="/static/atom.xsl"?> <feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/"> <title>introspection-dispatchreaper</title> <id>https://localhost:8089/services/server/introspection/search//dispatch</id> <updated>2015-08-26T14:25:14-07:00</updated> <generator build="ced4408678cc212328ba3550d23cba87c24339d4" version="20150826"/> <author> <name>Splunk</name> </author> <link href="/services/server/introspection/search//dispatch/_acl" rel="_acl"/> <opensearch:totalResults>1</opensearch:totalResults> <opensearch:itemsPerPage>30</opensearch:itemsPerPage> <opensearch:startIndex>0</opensearch:startIndex> <s:messages/> <entry> <title>Search_StartUp_Time</title> <id>https://localhost:8089/services/server/introspection/search//dispatch/Search_StartUp_Time</id> <updated>2015-08-26T14:25:14-07:00</updated> <link href="/services/server/introspection/search//dispatch/Search_StartUp_Time" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/search//dispatch/Search_StartUp_Time" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="Search_StartUp_Time_Average_Time(ms)">128.619048</s:key> <s:key name="Search_StartUp_Time_Max_Time(ms)">171</s:key> <s:key name="eai:acl"> <s:dict> <s:key name="app"></s:key> <s:key name="can_list">0</s:key> <s:key name="can_write">1</s:key> <s:key name="modifiable">0</s:key> <s:key name="owner">system</s:key> <s:key name="perms"> <s:dict> <s:key name="read"> <s:list> <s:item>*</s:item> </s:list> </s:key> <s:key name="write"> <s:list> <s:item>*</s:item> </s:list> </s:key> </s:dict> </s:key> <s:key name="removable">0</s:key> <s:key name="sharing">system</s:key> </s:dict> </s:key> <s:key name="eai:attributes"> <s:dict> <s:key name="optionalFields"> <s:list/> </s:key> <s:key name="requiredFields"> <s:list/> </s:key> <s:key name="wildcardFields"> <s:list/> </s:key> </s:dict> </s:key> </s:dict> </content> </entry> </feed>
server/introspection/search/distributed GET
XML
XML Request
curl -k -u username:password https://localhost:8089/services/server/introspection/search/distributed
XML Response
<?xml-stylesheet type="text/xml" href="/static/atom.xsl"?> <feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/"> <title>search-distributedmetrics</title> <id>https://localhost:8089/services/server/introspection/search/distributed</id> <updated>2015-08-26T14:35:48-07:00</updated> <generator build="ced4408678cc212328ba3550d23cba87c24339d4" version="20150826"/> <author> <name>Splunk</name> </author> <link href="/services/server/introspection/search/distributed/_acl" rel="_acl"/> <opensearch:totalResults>3</opensearch:totalResults> <opensearch:itemsPerPage>30</opensearch:itemsPerPage> <opensearch:startIndex>0</opensearch:startIndex> <s:messages/> <entry> <title>per_searchhead_metrics</title> <id>https://localhost:8089/services/server/introspection/search/distributed/per_searchhead_metrics</id> <updated>2015-08-26T14:35:48-07:00</updated> <link href="/services/server/introspection/search/distributed/per_searchhead_metrics" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/search/distributed/per_searchhead_metrics" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="eai:acl"> <s:dict> <s:key name="app"></s:key> <s:key name="can_list">0</s:key> <s:key name="can_write">0</s:key> <s:key name="modifiable">0</s:key> <s:key name="owner">system</s:key> <s:key name="perms"> <s:dict> <s:key name="read"> <s:list> <s:item>*</s:item> </s:list> </s:key> <s:key name="write"> <s:list/> </s:key> </s:dict> </s:key> <s:key name="removable">0</s:key> <s:key name="sharing">system</s:key> </s:dict> </s:key> </s:dict> </content> </entry> <entry> <title>localhost:8089</title> <id>https://localhost:8089/services/server/introspection/search/distributed/peer.sv.splunk.com%3A10017</id> <updated>2015-08-26T14:35:48-07:00</updated> <link href="/services/server/introspection/search/distributed/peer.sv.splunk.com%3A10017" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/search/distributed/peer.sv.splunk.com%3A10017" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="Get_Authentication_Max_Time(ms)">4</s:key> <s:key name="Get_Authentication_Mean_Time(ms)">3.400000</s:key> <s:key name="Get_BundleList_Max_Time(ms)">5</s:key> <s:key name="Get_BundleList_Mean_Time(ms)">3.800000</s:key> <s:key name="Get_ServerInfo_Max_Time(ms)">14</s:key> <s:key name="Get_ServerInfo_Mean_Time(ms)">9.300000</s:key> <s:key name="eai:acl"> <s:dict> <s:key name="app"></s:key> <s:key name="can_list">0</s:key> <s:key name="can_write">0</s:key> <s:key name="modifiable">0</s:key> <s:key name="owner">system</s:key> <s:key name="perms"> <s:dict> <s:key name="read"> <s:list> <s:item>*</s:item> </s:list> </s:key> <s:key name="write"> <s:list/> </s:key> </s:dict> </s:key> <s:key name="removable">0</s:key> <s:key name="sharing">system</s:key> </s:dict> </s:key> </s:dict> </content> </entry> <entry> <title>window_metrics</title> <id>https://localhost:8089/services/server/introspection/search/distributed/window_metrics</id> <updated>2015-08-26T14:35:48-07:00</updated> <link href="/services/server/introspection/search/distributed/window_metrics" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/search/distributed/window_metrics" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="average_bytes">0.000000</s:key> <s:key name="average_msecs">0.000000</s:key> <s:key name="count">0</s:key> <s:key name="eai:acl"> <s:dict> <s:key name="app"></s:key> <s:key name="can_list">0</s:key> <s:key name="can_write">0</s:key> <s:key name="modifiable">0</s:key> <s:key name="owner">system</s:key> <s:key name="perms"> <s:dict> <s:key name="read"> <s:list> <s:item>*</s:item> </s:list> </s:key> <s:key name="write"> <s:list/> </s:key> </s:dict> </s:key> <s:key name="removable">0</s:key> <s:key name="sharing">system</s:key> </s:dict> </s:key> </s:dict> </content> </entry> </feed>
server/introspection/search/saved GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/server/introspection/search/saved
XML Response
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/"> <title>introspection-savedsearches</title> <id>https://localhost:8089/services/server/introspection/search/saved</id> <updated>2015-06-03T16:41:21-07:00</updated> <generator build="6cfc0237739f" version="6.3.0"/> <author> <name>Splunk</name> </author> <link href="/services/server/introspection/search/saved/_acl" rel="_acl"/> <opensearch:totalResults>2</opensearch:totalResults> <opensearch:itemsPerPage>30</opensearch:itemsPerPage> <opensearch:startIndex>0</opensearch:startIndex> <s:messages/> <entry> <title>admin;search;search_1</title> <id>https://localhost:8089/services/server/introspection/search/saved/admin%3Bsearch%3Bsearch_1</id> <updated>2015-06-03T16:41:21-07:00</updated> <link href="/services/server/introspection/search/saved/admin%3Bsearch%3Bsearch_1” rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/search/saved/admin%3Bsearch%3Bsearch_1” rel="list"/> <content type="text/xml"> <s:dict> <s:key name="disabled">0</s:key> <s:key name="eai:acl"> <s:dict> <s:key name="app"></s:key> <s:key name="can_list">1</s:key> <s:key name="can_write">1</s:key> <s:key name="modifiable">0</s:key> <s:key name="owner">system</s:key> <s:key name="perms"> <s:dict> <s:key name="read"> <s:list> <s:item>admin</s:item> <s:item>splunk-system-role</s:item> </s:list> </s:key> <s:key name="write"> <s:list/> </s:key> </s:dict> </s:key> <s:key name="removable">0</s:key> <s:key name="sharing">system</s:key> </s:dict> </s:key> <s:key name="final_score">1433294868</s:key> <s:key name="name">search_1</s:key> <s:key name="orig_score">1433374860</s:key> <s:key name="owner">admin</s:key> <s:key name="priority_no">1</s:key> <s:key name="real_time_adj">-80000</s:key> <s:key name="runtime_adj">8</s:key> <s:key name="skipped_adj">0</s:key> <s:key name="window_adj">0</s:key> </s:dict> </content> </entry> <entry> <title>nobody;search;Errors in the last hour</title> <id>https://localhost:8089/services/server/introspection/search/saved/nobody%3Bsearch%3BErrors%20in%20the%20last%20hour</id> <updated>2015-06-03T16:41:21-07:00</updated> <link href="/services/server/introspection/search/saved/nobody%3Bsearch%3BErrors%20in%20the%20last%20hour" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/introspection/search/saved/nobody%3Bsearch%3BErrors%20in%20the%20last%20hour" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="disabled">0</s:key> <s:key name="eai:acl"> <s:dict> <s:key name="app"></s:key> <s:key name="can_list">1</s:key> <s:key name="can_write">1</s:key> <s:key name="modifiable">0</s:key> <s:key name="owner">system</s:key> <s:key name="perms"> <s:dict> <s:key name="read"> <s:list> <s:item>admin</s:item> <s:item>splunk-system-role</s:item> </s:list> </s:key> <s:key name="write"> <s:list/> </s:key> </s:dict> </s:key> <s:key name="removable">0</s:key> <s:key name="sharing">system</s:key> </s:dict> </s:key> <s:key name="final_score">1433294980</s:key> <s:key name="name">Errors in the last hour</s:key> <s:key name="orig_score">1433374860</s:key> <s:key name="owner">nobody</s:key> <s:key name="priority_no">2</s:key> <s:key name="real_time_adj">-80000</s:key> <s:key name="runtime_adj">1</s:key> <s:key name="skipped_adj">0</s:key> <s:key name="window_adj">119</s:key> </s:dict> </content> </entry> </feed>
server/status GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status
XML Response
. . . <title></title> <id>https://localhost:8089/services/server/status</id> <updated>2014-03-25T13:52:59-07:00</updated> <generator build="200839" version="6.1"/> <author> <name>Splunk</name> </author> <s:messages/> <entry> <title>dispatch-artifacts</title> <id>https://localhost:8089/services/server/status/dispatch-artifacts</id> <updated>2014-03-25T13:52:59-07:00</updated> <link href="/services/server/status/dispatch-artifacts" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/status/dispatch-artifacts" rel="list"/> <content type="text/xml"> <s:dict/> </content> </entry> <entry> <title>fishbucket</title> <id>https://localhost:8089/services/server/status/fishbucket</id> <updated>2014-03-25T13:52:59-07:00</updated> <link href="/services/server/status/fishbucket" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/status/fishbucket" rel="list"/> <content type="text/xml"> <s:dict/> </content> </entry> <entry> <title>partitions-space</title> <id>https://localhost:8089/services/server/status/partitions-space</id> <updated>2014-03-25T13:52:59-07:00</updated> <link href="/services/server/status/partitions-space" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/status/partitions-space" rel="list"/> <content type="text/xml"> <s:dict/> </content> </entry>
server/status/dispatch-artifacts GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status/dispatch-artifacts
XML Response
. . . <title>introspection--disk-objects--search-dispatch-artifacts</title> <id>https://localhost:8089/services/server/status/dispatch-artifacts</id> <updated>2014-03-25T11:10:33-07:00</updated> <generator build="200839" version="6.1"/> <author> <name>Splunk</name> </author> ... opensearch elements elided ... <s:messages/> <entry> <title>result</title> <id>https://localhost:8089/services/server/status/dispatch-artifacts/result</id> <updated>2014-03-25T11:10:33-07:00</updated> <link href="/services/server/status/dispatch-artifacts/result" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/status/dispatch-artifacts/result" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="count_realtime">0</s:key> <s:key name="count_scheduled">0</s:key> <s:key name="count_summary">0</s:key> <s:key name="eai:acl"> ... elided ... </s:key> <s:key name="top_apps"/> <s:key name="top_named_searches"/> <s:key name="top_users"/> <s:key name="total_count">0</s:key> </s:dict> </content> </entry>
server/status/fishbucket GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status/fishbucket
XML Response
. . . <title>introspection--disk-objects--fishbucket</title> <id>https://localhost:8089/services/server/status/fishbucket</id> <updated>2014-03-25T11:31:10-07:00</updated> <generator build="200839" version="6.1"/> <author> <name>Splunk</name> </author> ... opensearch elements elided ... <s:messages/> <entry> <title>result</title> <id>https://localhost:8089/services/server/status/fishbucket/result</id> <updated>2014-03-25T11:31:10-07:00</updated> <link href="/services/server/status/fishbucket/result" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/status/fishbucket/result" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="eai:acl"> ... elided ... </s:key> <s:key name="key_count">0</s:key> <s:key name="total_size">0.000</s:key> </s:dict> </content> </entry>
server/status/limits/search-concurrency GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status/limits/search-concurrency
XML Response
. . . <title>server-status-limits-concurrency</title> <id>https://localhost:8089/services/server/status/limits/search-concurrency</id> <updated>2014-03-25T11:40:16-07:00</updated> <generator build="200839" version="6.1"/> <author> <name>Splunk</name> </author> ... opensearch elements elided ... <s:messages/> <entry> <title>search-concurrency</title> <id>https://localhost:8089/services/server/status/limits/search-concurrency/search-concurrency</id> <updated>2014-03-25T11:40:16-07:00</updated> <link href="/services/server/status/limits/search-concurrency/search-concurrency" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/status/limits/search-concurrency/search-concurrency" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="eai:acl"> ... elided ... </s:key> <s:key name="max_auto_summary_searches">2</s:key> <s:key name="max_hist_scheduled_searches">5</s:key> <s:key name="max_hist_searches">10</s:key> <s:key name="max_rt_scheduled_searches">5</s:key> <s:key name="max_rt_searches">10</s:key> </s:dict> </content> </entry>
server/status/partitions-space GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status/partitions-space
XML Response
. . . <title>introspection--disk-objects--partitions-space</title> <id>https://localhost:8089/services/server/status/partitions-space</id> <updated>2014-03-25T11:43:39-07:00</updated> <generator build="200839" version="6.1"/> <author> <name>Splunk</name> </author> ... opensearch elements elided ... <s:messages/> <entry> <title>0</title> <id>https://localhost:8089/services/server/status/partitions-space/0</id> <updated>2014-03-25T11:43:39-07:00</updated> <link href="/services/server/status/partitions-space/0" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/status/partitions-space/0" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="capacity">104901.000</s:key> <s:key name="eai:acl"> ... elided ... </s:key> <s:key name="free">7774.000</s:key> <s:key name="fs_type">ntfs</s:key> <s:key name="mount_point">C:\</s:key> </s:dict> </content> </entry>
server/status/resource-usage GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status/resource-usage
XML Response
. . . <title></title> <id>https://localhost:8089/services/server/status/resource-usage</id> <updated>2014-03-25T11:53:26-07:00</updated> <generator build="200839" version="6.1"/> <author> <name>Splunk</name> </author> <s:messages/> <entry> <title>hostwide</title> <id>https://localhost:8089/services/server/status/resource-usage/hostwide</id> <updated>2014-03-25T11:53:26-07:00</updated> <link href="/services/server/status/resource-usage/hostwide" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/status/resource-usage/hostwide" rel="list"/> <content type="text/xml"> <s:dict/> </content> </entry> <entry> <title>splunk-processes</title> <id>https://localhost:8089/services/server/status/resource-usage/splunk-processes</id> <updated>2014-03-25T11:53:26-07:00</updated> <link href="/services/server/status/resource-usage/splunk-processes" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/status/resource-usage/splunk-processes" rel="list"/> <content type="text/xml"> <s:dict/> </content> </entry>
server/status/resource-usage/hostwide GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status/resource-usage/hostwide
XML Response
. . . <title></title> <id>https://localhost:8089/services/server/status/resource-usage</id> <updated>2014-03-25T11:53:26-07:00</updated> <generator build="200839" version="6.1"/> <author> <name>Splunk</name> </author> <s:messages/> <entry> <title>hostwide</title> <id>https://localhost:8089/services/server/status/resource-usage/hostwide</id> <updated>2014-03-25T11:53:26-07:00</updated> <link href="/services/server/status/resource-usage/hostwide" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/status/resource-usage/hostwide" rel="list"/> <content type="text/xml"> <s:dict/> </content> </entry> <entry> <title>splunk-processes</title> <id>https://localhost:8089/services/server/status/resource-usage/splunk-processes</id> <updated>2014-03-25T11:53:26-07:00</updated> <link href="/services/server/status/resource-usage/splunk-processes" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/status/resource-usage/splunk-processes" rel="list"/> <content type="text/xml"> <s:dict/> </content> </entry>
server/status/resource-usage/splunk-processes GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status/resource-usage/splunk-processes/0
XML Response
. . . <feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/"> <title>introspection--resource-usage--splunk-processes</title> <id>https://localhost:8089/services/server/status/resource-usage/splunk-processes</id> <updated>2014-03-26T13:35:52-07:00</updated> <generator build="200839" version="6.1"/> <author> <name>Splunk</name> </author> ... opensearch elements elided ... <s:messages/> <entry> <title>0</title> <id>https://localhost:8089/services/server/status/resource-usage/splunk-processes/0</id> <updated>2014-03-26T13:35:52-07:00</updated> <link href="/services/server/status/resource-usage/splunk-processes/0" rel="alternate"/> <author> <name>system</name> </author> <link href="/services/server/status/resource-usage/splunk-processes/0" rel="list"/> <content type="text/xml"> <s:dict> <s:key name="args"> instrument-resource-usage</s:key> <s:key name="eai:acl"> ... elided ... </s:key> <s:key name="eai:attributes"> <s:dict> <s:key name="optionalFields"> <s:list/> </s:key> <s:key name="requiredFields"> <s:list/> </s:key> <s:key name="wildcardFields"> <s:list/> </s:key> </s:dict> </s:key> <s:key name="elapsed">619262.3610</s:key> <s:key name="mem_used">15.762</s:key> <s:key name="page_faults">12001684</s:key> <s:key name="pct_memory">0.40</s:key> <s:key name="pid">4256</s:key> <s:key name="ppid">2476</s:key> <s:key name="process">splunkd</s:key> <s:key name="t_count">4</s:key> </s:dict> </content> </entry> </feed>
Last modified on 01 October, 2015
PREVIOUS Introspection endpoint descriptions |
NEXT Knowledge endpoint descriptions |
This documentation applies to the following versions of Splunk® Enterprise: 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.3.12, 6.3.13, 6.3.14
Feedback submitted, thanks!