Related Answers
This documentation does not apply to the most recent version of Splunk.
Click here for the latest version.
Download topic as PDF
Introspection endpoint examples
data/index-volumes GET
XML
XML Request
curl -k -u admin:passwd https://localhost:8089/services/data/index-volumes
XML Response
.
.
.
<title>introspection--disk-objects--volumes</title>
<id>https://localhost:8089/services/data/index-volumes</id>
<updated>2014-03-25T14:41:09-07:00</updated>
<generator build="200839" version="6.1"/>
<author>
<name>Splunk</name>
</author>
... opensearch elements elided ...
<s:messages/>
<entry>
<title>_splunk_summaries</title>
<id>https://localhost:8089/services/data/index-volumes/_splunk_summaries</id>
<updated>2014-03-25T14:41:09-07:00</updated>
<link href="/services/data/index-volumes/_splunk_summaries" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/data/index-volumes/_splunk_summaries" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="max_size">infinite</s:key>
<s:key name="name">_splunk_summaries</s:key>
</s:dict>
</content>
</entry>
data/index-volumes/{name} GET
XML
XML Request
curl -k -u admin:passwd https://localhost:8089/services/data/index-volumes/_splunk_summaries
XML Response
.
.
.
<title>introspection--disk-objects--volumes</title>
<id>https://localhost:8089/services/data/index-volumes</id>
<updated>2014-03-27T14:35:26-07:00</updated>
<generator build="200839" version="6.1"/>
<author>
<name>Splunk</name>
</author>
... opensearch elements elided ...
<s:messages/>
<entry>
<title>_splunk_summaries</title>
<id>https://localhost:8089/services/data/index-volumes/_splunk_summaries</id>
<updated>2014-03-27T14:35:26-07:00</updated>
<link href="/services/data/index-volumes/_splunk_summaries" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/data/index-volumes/_splunk_summaries" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="eai:attributes">... elided ...</s:key>
<s:key name="max_size">infinite</s:key>
<s:key name="name">_splunk_summaries</s:key>
</s:dict>
</content>
</entry>
data/indexes GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/data/indexes
XML Response
.
.
.
<title>indexes</title>
<id>https://localhost:8089/services/data/indexes</id>
<updated>2011-07-11T18:09:22-07:00</updated>
<generator version="102807"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/data/indexes/_new" rel="create"/>
<link href="/services/data/indexes/_reload" rel="_reload"/>
... opensearch elements elided ...
<s:messages/>
<entry>
<title>_audit</title>
<id>https://localhost:8089/servicesNS/nobody/system/data/indexes/_audit</id>
<updated>2011-07-11T18:09:22-07:00</updated>
<link href="/servicesNS/nobody/system/data/indexes/_audit" rel="alternate"/>
<author>
<name>nobody</name>
</author>
<link href="/servicesNS/nobody/system/data/indexes/_audit" rel="list"/>
<link href="/servicesNS/nobody/system/data/indexes/_audit/_reload" rel="_reload"/>
<link href="/servicesNS/nobody/system/data/indexes/_audit" rel="edit"/>
<link href="/servicesNS/nobody/system/data/indexes/_audit/disable" rel="disable"/>
<content type="text/xml">
<s:dict>
<s:key name="assureUTF8">0</s:key>
<s:key name="blockSignSize">0</s:key>
<s:key name="blockSignatureDatabase">_blocksignature</s:key>
<s:key name="coldPath">$SPLUNK_DB/audit/colddb</s:key>
<s:key name="coldPath_expanded">/home/amrit/temp/curl/splunk/var/lib/splunk/audit/colddb</s:key>
<s:key name="coldToFrozenDir"/>
<s:key name="coldToFrozenScript"/>
<s:key name="compressRawdata">1</s:key>
<s:key name="currentDBSizeMB">1</s:key>
<s:key name="defaultDatabase">main</s:key>
<s:key name="disabled">0</s:key>
... eai:acl element elided ...
<s:key name="enableRealtimeSearch">1</s:key>
<s:key name="frozenTimePeriodInSecs">188697600</s:key>
<s:key name="homePath">$SPLUNK_DB/audit/db</s:key>
<s:key name="homePath_expanded">/home/amrit/temp/curl/splunk/var/lib/splunk/audit/db</s:key>
<s:key name="indexThreads">auto</s:key>
<s:key name="isInternal">1</s:key>
<s:key name="lastInitTime">1310432962.424512</s:key>
<s:key name="maxConcurrentOptimizes">3</s:key>
<s:key name="maxDataSize">auto</s:key>
<s:key name="maxHotBuckets">3</s:key>
<s:key name="maxHotIdleSecs">0</s:key>
<s:key name="maxHotSpanSecs">7776000</s:key>
<s:key name="maxMemMB">5</s:key>
<s:key name="maxMetaEntries">1000000</s:key>
<s:key name="maxRunningProcessGroups">20</s:key>
<s:key name="maxTime">2011-07-10T22:20:53-0700</s:key>
<s:key name="maxTotalDataSizeMB">500000</s:key>
<s:key name="maxWarmDBCount">300</s:key>
<s:key name="memPoolMB">auto</s:key>
<s:key name="minRawFileSyncSecs">disable</s:key>
<s:key name="minTime">2011-07-10T14:33:00-0700</s:key>
<s:key name="partialServiceMetaPeriod">0</s:key>
<s:key name="quarantineFutureSecs">2592000</s:key>
<s:key name="quarantinePastSecs">77760000</s:key>
<s:key name="rawChunkSizeBytes">131072</s:key>
<s:key name="rotatePeriodInSecs">60</s:key>
<s:key name="serviceMetaPeriod">25</s:key>
<s:key name="suppressBannerList"/>
<s:key name="sync">0</s:key>
<s:key name="syncMeta">1</s:key>
<s:key name="thawedPath">$SPLUNK_DB/audit/thaweddb</s:key>
<s:key name="thawedPath_expanded">/home/amrit/temp/curl/splunk/var/lib/splunk/audit/thaweddb</s:key>
<s:key name="throttleCheckPeriod">15</s:key>
<s:key name="totalEventCount">230</s:key>
</s:dict>
</content>
</entry>
data/indexes POST
XML
XML Request
curl -k -u admin:pass https://localhost:8089/servicesNS/admin/search/data/indexes -d name=Shadow
XML Response
.
.
.
<title>indexes</title>
<id>https://localhost:8089/servicesNS/admin/search/data/indexes</id>
<updated>2011-05-13T13:09:27-07:00</updated>
<generator version="98392"/>
<author>
<name>Splunk</name>
</author>
<link href="/servicesNS/admin/search/data/indexes/_new" rel="create"/>
<link href="/servicesNS/admin/search/data/indexes/_reload" rel="_reload"/>
... opensearch elements elided ...
<s:messages/>
<entry>
<title>shadow</title>
<id>https://localhost:8089/servicesNS/nobody/search/data/indexes/shadow</id>
<updated>2011-05-13T13:09:27-07:00</updated>
<link href="/servicesNS/nobody/search/data/indexes/shadow" rel="alternate"/>
<author>
<name>nobody</name>
</author>
<link href="/servicesNS/nobody/search/data/indexes/shadow" rel="list"/>
<link href="/servicesNS/nobody/search/data/indexes/shadow/_reload" rel="_reload"/>
<link href="/servicesNS/nobody/search/data/indexes/shadow" rel="edit"/>
<content type="text/xml">
<s:dict>
<s:key name="assureUTF8">0</s:key>
<s:key name="blockSignSize">0</s:key>
<s:key name="blockSignatureDatabase">_blocksignature</s:key>
<s:key name="coldPath">$SPLUNK_DB/shadow/colddb</s:key>
<s:key name="coldPath_expanded">/Applications/splunk/var/lib/splunk/shadow/colddb</s:key>
<s:key name="coldToFrozenDir"></s:key>
<s:key name="coldToFrozenScript"></s:key>
<s:key name="compressRawdata">1</s:key>
<s:key name="currentDBSizeMB">1</s:key>
<s:key name="defaultDatabase">main</s:key>
<s:key name="eai:acl">. . .</s:key>
<s:key name="enableRealtimeSearch">1</s:key>
<s:key name="frozenTimePeriodInSecs">188697600</s:key>
<s:key name="homePath">$SPLUNK_DB/shadow/db</s:key>
<s:key name="homePath_expanded">/Applications/splunk/var/lib/splunk/shadow/db</s:key>
<s:key name="indexThreads">auto</s:key>
<s:key name="isInternal">0</s:key>
<s:key name="lastInitTime">1305317367.331268</s:key>
<s:key name="maxConcurrentOptimizes">3</s:key>
<s:key name="maxDataSize">auto</s:key>
<s:key name="maxHotBuckets">3</s:key>
<s:key name="maxHotIdleSecs">0</s:key>
<s:key name="maxHotSpanSecs">7776000</s:key>
<s:key name="maxMemMB">5</s:key>
<s:key name="maxMetaEntries">1000000</s:key>
<s:key name="maxTime"></s:key>
<s:key name="maxTotalDataSizeMB">500000</s:key>
<s:key name="maxWarmDBCount">300</s:key>
<s:key name="memPoolMB">auto</s:key>
<s:key name="minRawFileSyncSecs">disable</s:key>
<s:key name="minTime"></s:key>
<s:key name="partialServiceMetaPeriod">0</s:key>
<s:key name="quarantineFutureSecs">2592000</s:key>
<s:key name="quarantinePastSecs">77760000</s:key>
<s:key name="rawChunkSizeBytes">131072</s:key>
<s:key name="rotatePeriodInSecs">60</s:key>
<s:key name="serviceMetaPeriod">25</s:key>
<s:key name="suppressBannerList"></s:key>
<s:key name="sync">0</s:key>
<s:key name="syncMeta">1</s:key>
<s:key name="thawedPath">$SPLUNK_DB/shadow/thaweddb</s:key>
<s:key name="thawedPath_expanded">/Applications/splunk/var/lib/splunk/shadow/thaweddb</s:key>
<s:key name="throttleCheckPeriod">15</s:key>
<s:key name="totalEventCount">0</s:key>
</s:dict>
</content>
</entry>
data/indexes/{name} DELETE
XML
XML Request
curl -k -u admin:pass --request DELETE https://localhost:8089/services/data/indexes/shadow
XML Response
.
.
.
<title>indexes</title>
<id>https://localhost:8089/services/data/indexes</id>
<updated>2012-08-02T11:10:16-07:00</updated>
<generator build="131547" version="5.0"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/data/indexes/_new" rel="create"/>
<link href="/services/data/indexes/_reload" rel="_reload"/>
... opensearch elements elided ...
<s:messages/>
data/indexes/{name} GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/servicesNS/nobody/search/data/indexes/shadow
XML Response
.
.
.
<title>indexes</title>
<id>https://localhost:8089/servicesNS/nobody/search/data/indexes</id>
<updated>2011-08-01T12:25:34-07:00</updated>
<generator version="105103"/>
<author>
<name>Splunk</name>
</author>
<link href="/servicesNS/nobody/search/data/indexes/_new" rel="create"/>
<link href="/servicesNS/nobody/search/data/indexes/_reload" rel="_reload"/>
... opensearch elements elided ...
<s:messages/>
<entry>
<title>shadow</title>
<id>https://localhost:8089/servicesNS/nobody/search/data/indexes/shadow</id>
<updated>2011-08-01T11:47:55-07:00</updated>
<link href="/servicesNS/nobody/search/data/indexes/shadow" rel="alternate"/>
<author>
<name>nobody</name>
</author>
<link href="/servicesNS/nobody/search/data/indexes/shadow" rel="list"/>
<link href="/servicesNS/nobody/search/data/indexes/shadow/_reload" rel="_reload"/>
<link href="/servicesNS/nobody/search/data/indexes/shadow" rel="edit"/>
<link href="/servicesNS/nobody/search/data/indexes/shadow/disable" rel="disable"/>
<content type="text/xml">
<s:dict>
<s:key name="assureUTF8">0</s:key>
<s:key name="blockSignSize">0</s:key>
<s:key name="blockSignatureDatabase">_blocksignature</s:key>
<s:key name="bloomfilterTotalSizeKB">0</s:key>
<s:key name="coldPath">$SPLUNK_DB/shadow/colddb</s:key>
<s:key name="coldPath_expanded">/home/amrit/bin/splunk-current/var/lib/splunk/shadow/colddb</s:key>
<s:key name="coldToFrozenDir"/>
<s:key name="coldToFrozenScript"/>
<s:key name="compressRawdata">1</s:key>
<s:key name="currentDBSizeMB">1</s:key>
<s:key name="defaultDatabase">main</s:key>
<s:key name="disabled">0</s:key>
...eai:acl element elided ...
<s:key name="eai:attributes">
<s:dict>
<s:key name="optionalFields">
<s:list>
<s:item>assureUTF8</s:item>
<s:item>blockSignSize</s:item>
<s:item>coldToFrozenDir</s:item>
<s:item>coldToFrozenScript</s:item>
<s:item>compressRawdata</s:item>
<s:item>frozenTimePeriodInSecs</s:item>
<s:item>maxConcurrentOptimizes</s:item>
<s:item>maxDataSize</s:item>
<s:item>maxHotBuckets</s:item>
<s:item>maxHotIdleSecs</s:item>
<s:item>maxHotSpanSecs</s:item>
<s:item>maxMemMB</s:item>
<s:item>maxMetaEntries</s:item>
<s:item>maxRunningProcessGroups</s:item>
<s:item>maxTotalDataSizeMB</s:item>
<s:item>maxWarmDBCount</s:item>
<s:item>minRawFileSyncSecs</s:item>
<s:item>partialServiceMetaPeriod</s:item>
<s:item>quarantineFutureSecs</s:item>
<s:item>quarantinePastSecs</s:item>
<s:item>rawChunkSizeBytes</s:item>
<s:item>rotatePeriodInSecs</s:item>
<s:item>serviceMetaPeriod</s:item>
<s:item>suppressBannerList</s:item>
<s:item>syncMeta</s:item>
<s:item>throttleCheckPeriod</s:item>
</s:list>
</s:key>
<s:key name="requiredFields">
<s:list/>
</s:key>
<s:key name="wildcardFields">
<s:list/>
</s:key>
</s:dict>
</s:key>
<s:key name="enableRealtimeSearch">1</s:key>
<s:key name="frozenTimePeriodInSecs">188697600</s:key>
<s:key name="homePath">$SPLUNK_DB/shadow/db</s:key>
<s:key name="homePath_expanded">/home/amrit/bin/splunk-current/var/lib/splunk/shadow/db</s:key>
<s:key name="indexThreads">auto</s:key>
<s:key name="isInternal">0</s:key>
<s:key name="lastInitTime">1312226552.102920</s:key>
<s:key name="maxConcurrentOptimizes">3</s:key>
<s:key name="maxDataSize">auto</s:key>
<s:key name="maxHotBuckets">3</s:key>
<s:key name="maxHotIdleSecs">0</s:key>
<s:key name="maxHotSpanSecs">7776000</s:key>
<s:key name="maxMemMB">5</s:key>
<s:key name="maxMetaEntries">1000000</s:key>
<s:key name="maxRunningProcessGroups">20</s:key>
<s:key name="maxTime"/>
<s:key name="maxTotalDataSizeMB">500000</s:key>
<s:key name="maxWarmDBCount">300</s:key>
<s:key name="memPoolMB">auto</s:key>
<s:key name="minRawFileSyncSecs">disable</s:key>
<s:key name="minTime"/>
<s:key name="numBloomfilters">0</s:key>
<s:key name="numHotBuckets">0</s:key>
<s:key name="numWarmBuckets">0</s:key>
<s:key name="partialServiceMetaPeriod">0</s:key>
<s:key name="quarantineFutureSecs">2592000</s:key>
<s:key name="quarantinePastSecs">77760000</s:key>
<s:key name="rawChunkSizeBytes">131072</s:key>
<s:key name="rotatePeriodInSecs">60</s:key>
<s:key name="serviceMetaPeriod">25</s:key>
<s:key name="suppressBannerList"/>
<s:key name="sync">0</s:key>
<s:key name="syncMeta">1</s:key>
<s:key name="thawedPath">$SPLUNK_DB/shadow/thaweddb</s:key>
<s:key name="thawedPath_expanded">/home/amrit/bin/splunk-current/var/lib/splunk/shadow/thaweddb</s:key>
<s:key name="throttleCheckPeriod">15</s:key>
<s:key name="totalEventCount">0</s:key>
</s:dict>
</content>
</entry>
data/indexes/{name} POST
XML
XML Request
curl -k -u admin:pass -d maxTotalDataSizeMB=400000 https://localhost:8089/servicesNS/nobody/search/data/indexes/shadow
XML Response
.
.
.
<title>indexes</title>
<id>https://localhost:8089/servicesNS/nobody/search/data/indexes</id>
<updated>2011-05-16T12:20:06-07:00</updated>
<generator version="98392"/>
<author>
<name>Splunk</name>
</author>
<link href="/servicesNS/nobody/search/data/indexes/_new" rel="create"/>
<link href="/servicesNS/nobody/search/data/indexes/_reload" rel="_reload"/>
... opensearch elements elided ...
<s:messages/>
<entry>
<title>shadow</title>
<id>https://localhost:8089/servicesNS/nobody/search/data/indexes/shadow</id>
<updated>2011-05-16T12:18:56-07:00</updated>
<link href="/servicesNS/nobody/search/data/indexes/shadow" rel="alternate"/>
<author>
<name>nobody</name>
</author>
<link href="/servicesNS/nobody/search/data/indexes/shadow" rel="list"/>
<link href="/servicesNS/nobody/search/data/indexes/shadow/_reload" rel="_reload"/>
<link href="/servicesNS/nobody/search/data/indexes/shadow" rel="edit"/>
<content type="text/xml">
<s:dict>
<s:key name="assureUTF8">0</s:key>
<s:key name="blockSignSize">0</s:key>
<s:key name="blockSignatureDatabase">_blocksignature</s:key>
<s:key name="coldPath">$SPLUNK_DB/shadow/colddb</s:key>
<s:key name="coldPath_expanded">/Applications/splunk4.3/var/lib/splunk/shadow/colddb</s:key>
<s:key name="coldToFrozenDir"></s:key>
<s:key name="coldToFrozenScript"></s:key>
<s:key name="compressRawdata">1</s:key>
<s:key name="currentDBSizeMB">1</s:key>
<s:key name="defaultDatabase">main</s:key>
<s:key name="eai:acl">. . .</s:key>
<s:key name="enableRealtimeSearch">1</s:key>
<s:key name="frozenTimePeriodInSecs">188697600</s:key>
<s:key name="homePath">$SPLUNK_DB/shadow/db</s:key>
<s:key name="homePath_expanded">/Applications/splunk4.3/var/lib/splunk/shadow/db</s:key>
<s:key name="indexThreads">auto</s:key>
<s:key name="isInternal">0</s:key>
<s:key name="lastInitTime">1305573611.118477</s:key>
<s:key name="maxConcurrentOptimizes">3</s:key>
<s:key name="maxDataSize">auto</s:key>
<s:key name="maxHotBuckets">3</s:key>
<s:key name="maxHotIdleSecs">0</s:key>
<s:key name="maxHotSpanSecs">7776000</s:key>
<s:key name="maxMemMB">5</s:key>
<s:key name="maxMetaEntries">1000000</s:key>
<s:key name="maxTime"></s:key>
<s:key name="maxTotalDataSizeMB">400000</s:key>
<s:key name="maxWarmDBCount">300</s:key>
<s:key name="memPoolMB">auto</s:key>
<s:key name="minRawFileSyncSecs">disable</s:key>
<s:key name="minTime"></s:key>
<s:key name="partialServiceMetaPeriod">0</s:key>
<s:key name="quarantineFutureSecs">2592000</s:key>
<s:key name="quarantinePastSecs">77760000</s:key>
<s:key name="rawChunkSizeBytes">131072</s:key>
<s:key name="rotatePeriodInSecs">60</s:key>
<s:key name="serviceMetaPeriod">25</s:key>
<s:key name="suppressBannerList"></s:key>
<s:key name="sync">0</s:key>
<s:key name="syncMeta">1</s:key>
<s:key name="thawedPath">$SPLUNK_DB/shadow/thaweddb</s:key>
<s:key name="thawedPath_expanded">/Applications/splunk4.3/var/lib/splunk/shadow/thaweddb</s:key>
<s:key name="throttleCheckPeriod">15</s:key>
<s:key name="totalEventCount">0</s:key>
</s:dict>
</content>
</entry>
data/indexes-extended GET
XML
XML Request
curl -k -u admin:passwd https://localhost:8089/services/data/indexes-extended
XML Response
.
.
.
<title>introspection--disk-objects--indexes</title>
<id>https://localhost:8089/services/data/indexes-extended</id>
<updated>2014-03-31T12:41:09-07:00</updated>
<generator build="200839" version="6.1"/>
<author>
<name>Splunk</name>
</author>
... opensearch elements elided ...
<s:messages/>
<entry>
<title>_audit</title>
<id>https://localhost:8089/services/data/indexes-extended/_audit</id>
<updated>2014-03-31T12:41:09-07:00</updated>
<link href="/services/data/indexes-extended/_audit" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/data/indexes-extended/_audit" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="bucket_dirs">
<s:dict>
<s:key name="cold">
<s:dict>
<s:key name="bucket_count">0</s:key>
<s:key name="size">0.000</s:key>
</s:dict>
</s:key>
<s:key name="home">
<s:dict>
<s:key name="event_count">6169</s:key>
<s:key name="event_max_time">1395246673</s:key>
<s:key name="event_min_time">1394732683</s:key>
<s:key name="hot_bucket_count">1</s:key>
<s:key name="size">1.000</s:key>
<s:key name="warm_bucket_count">5</s:key>
</s:dict>
</s:key>
<s:key name="thawed">
<s:dict>
<s:key name="bucket_count">0</s:key>
<s:key name="size">0.000</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="name">_audit</s:key>
<s:key name="total_bucket_count">6</s:key>
<s:key name="total_event_count">18096</s:key>
<s:key name="total_raw_size">1.000</s:key>
<s:key name="total_size">1.000</s:key>
</s:dict>
</content>
</entry>
.
.
.
elided
.
.
.
<entry>
<title>summary</title>
<id>https://localhost:8089/services/data/indexes-extended/summary</id>
<updated>2014-03-31T12:41:09-07:00</updated>
<link href="/services/data/indexes-extended/summary" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/data/indexes-extended/summary" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="name">summary</s:key>
<s:key name="total_size">0.000</s:key>
</s:dict>
</content>
</entry>
data/indexes-extended/{name} GET
XML
XML Request
curl -k -u admin:passwd https://localhost:8089/services/data/indexes-extended/history
XML Response
.
.
.
<title>introspection--disk-objects--indexes</title>
<id>https://localhost:8089/services/data/indexes-extended</id>
<updated>2014-03-31T12:42:29-07:00</updated>
<generator build="200839" version="6.1"/>
<author>
<name>Splunk</name>
</author>
... opensearch elements elided ...
<s:messages/>
<entry>
<title>_internal</title>
<id>https://localhost:8089/services/data/indexes-extended/_internal</id>
<updated>2014-03-31T12:42:29-07:00</updated>
<link href="/services/data/indexes-extended/_internal" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/data/indexes-extended/_internal" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="bucket_dirs">
<s:dict>
<s:key name="cold">
<s:dict>
<s:key name="bucket_count">0</s:key>
<s:key name="size">0.000</s:key>
</s:dict>
</s:key>
<s:key name="home">
<s:dict>
<s:key name="event_count">180492</s:key>
<s:key name="event_max_time">1395246673</s:key>
<s:key name="event_min_time">1392167582</s:key>
<s:key name="hot_bucket_count">3</s:key>
<s:key name="size">9.000</s:key>
<s:key name="warm_bucket_count">6</s:key>
</s:dict>
</s:key>
<s:key name="thawed">
<s:dict>
<s:key name="bucket_count">0</s:key>
<s:key name="size">0.000</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="eai:attributes">
... elided ...
</s:key>
<s:key name="name">_internal</s:key>
<s:key name="total_bucket_count">9</s:key>
<s:key name="total_event_count">556322</s:key>
<s:key name="total_raw_size">28.000</s:key>
<s:key name="total_size">22.000</s:key>
</s:dict>
</content>
</entry>
server/info GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/info
XML Response
.
.
.
<title>server-info</title>
<id>https://localhost:8089/services/server/info</id>
<updated>2014-08-04T15:48:10-07:00</updated>
<generator build="221120" version="6.2"/>
<author>
<name>Splunk</name>
</author>
... opensearch nodes elided ...
<s:messages/>
<entry>
<title>server-info</title>
<id>https://localhost:8089/services/server/info/server-info</id>
<updated>2014-08-04T15:48:10-07:00</updated>
<link href="/services/server/info/server-info" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/info/server-info" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="activeLicenseGroup">Enterprise</s:key>
<s:key name="addOns">
<s:dict>
<s:key name="hadoop">
<s:dict>
<s:key name="parameters">
<s:dict>
<s:key name="erp_type">report</s:key>
<s:key name="maxNodes">10</s:key>
</s:dict>
</s:key>
<s:key name="type">external_results_provider</s:key>
</s:dict>
</s:key>
</s:dict>
</s:key>
<s:key name="build">221120</s:key>
<s:key name="cpu_arch">x64</s:key>
<s:key name="eai:acl"> ... elided ... </s:key>
<s:key name="guid">9CBD8473-4E7D-4FF2-A042-050C5C27C298</s:key>
<s:key name="host">myHostName</s:key>
<s:key name="host_fqdn">myHostName</s:key>
<s:key name="isFree">0</s:key>
<s:key name="isTrial">0</s:key>
<s:key name="kv_store_status">Could not find task executor for type 'kv_store_status'</s:key>
<s:key name="licenseKeys">
<s:list>
<s:item>31BB75AA379A50F9225471053337B6E438C4C7A1F42A905AB93AF16C9A12124E</s:item>
</s:list>
</s:key>
<s:key name="licenseSignature">2f121cff440e115470154cdf92e208b5</s:key>
<s:key name="licenseState">OK</s:key>
<s:key name="license_labels">
<s:list>
<s:item>Splunk xyz License</s:item>
</s:list>
</s:key>
<s:key name="master_guid">9CBD8473-4E7D-4FF2-A042-050C5C27C298</s:key>
<s:key name="max_users">4294967295</s:key>
<s:key name="mode">normal</s:key>
<s:key name="numberOfCores">2</s:key>
<s:key name="os_build">6</s:key>
<s:key name="os_name">Windows</s:key>
<s:key name="os_version">1</s:key>
<s:key name="physicalMemoryMB">3982</s:key>
<s:key name="product_type">splunk</s:key>
<s:key name="rtsearch_enabled">1</s:key>
<s:key name="serverName">myHostName</s:key>
<s:key name="server_roles">
<s:dict>
<s:key name="indexer"/>
<s:key name="license_master"/>
<s:key name="management_console"/>
</s:dict>
</s:key>
<s:key name="startup_time">1407182814</s:key>
<s:key name="version">6.2</s:key>
</s:dict>
</content>
</entry>
server/introspection GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/introspection
XML Response
.
.
.
<title></title>
<id>https://localhost:8089/services/server/introspection</id>
<updated>2014-08-04T11:40:23-07:00</updated>
<generator build="221120" version="6.2"/>
<author>
<name>Splunk</name>
</author>
<s:messages/>
<entry>
<title>indexer</title>
<id>https://localhost:8089/services/server/introspection/indexer</id>
<updated>2014-08-04T11:40:23-07:00</updated>
<link href="/services/server/introspection/indexer" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/indexer" rel="list"/>
<content type="text/xml">
<s:dict/>
</content>
</entry>
<entry>
<title>kvstore</title>
<id>https://localhost:8089/services/server/introspection/kvstore</id>
<updated>2014-08-04T11:40:23-07:00</updated>
<link href="/services/server/introspection/kvstore" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/kvstore" rel="list"/>
<link href="/services/server/introspection/kvstore/_reload" rel="_reload"/>
<content type="text/xml">
<s:dict/>
</content>
</entry>
<entry>
<title>pipelines</title>
<id>https://localhost:8089/services/server/introspection/pipelines</id>
<updated>2014-08-04T11:40:23-07:00</updated>
<link href="/services/server/introspection/pipelines" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/pipelines" rel="list"/>
<content type="text/xml">
<s:dict/>
</content>
</entry>
<entry>
<title>processors</title>
<id>https://localhost:8089/services/server/introspection/processors</id>
<updated>2014-08-04T11:40:23-07:00</updated>
<link href="/services/server/introspection/processors" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/processors" rel="list"/>
<content type="text/xml">
<s:dict/>
</content>
</entry>
<entry>
<title>queues</title>
<id>https://localhost:8089/services/server/introspection/queues</id>
<updated>2014-08-04T11:40:23-07:00</updated>
<link href="/services/server/introspection/queues" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/queues" rel="list"/>
<content type="text/xml">
<s:dict/>
</content>
</entry>
server/introspection/indexer GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/introspection/indexer
XML Response
.
.
.
<title>introspection-indexer</title>
<id>https://localhost:8089/services/server/introspection/indexer</id>
<updated>2014-08-04T11:43:04-07:00</updated>
<generator build="221120" version="6.2"/>
<author>
<name>Splunk</name>
</author>
<opensearch:totalResults>1</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>indexer</title>
<id>https://localhost:8089/services/server/introspection/indexer/indexer</id>
<updated>2014-08-04T11:43:04-07:00</updated>
<link href="/services/server/introspection/indexer/indexer" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/indexer/indexer" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="average_KBps">0.517667</s:key>
<s:key name="eai:acl">... elided ...</s:key>
<s:key name="reason">.</s:key>
<s:key name="status">nominal</s:key>
</s:dict>
</content>
</entry>
server/introspection/kvstore GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/introspection/kvstore
XML Response
.
.
.
<title></title>
<id>https://localhost:8089/services/server/introspection/kvstore</id>
<updated>2014-08-20T14:06:12-07:00</updated>
<generator build="221120" version="6.2"/>
<author>
<name>Splunk</name>
</author>
<s:messages/>
<entry>
<title>collectionstats</title>
<id>https://localhost:8089/services/server/introspection/kvstore/collectionstats</id>
<updated>2014-08-20T14:06:12-07:00</updated>
<link href="/services/server/introspection/kvstore/collectionstats" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/kvstore/collectionstats" rel="list"/>
<content type="text/xml">
<s:dict/>
</content>
</entry>
<entry>
<title>replicasetstats</title>
<id>https://localhost:8089/services/server/introspection/kvstore/replicasetstats</id>
<updated>2014-08-20T14:06:12-07:00</updated>
<link href="/services/server/introspection/kvstore/replicasetstats" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/kvstore/replicasetstats" rel="list"/>
<content type="text/xml">
<s:dict/>
</content>
</entry>
<entry>
<title>serverstatus</title>
<id>https://localhost:8089/services/server/introspection/kvstore/serverstatus</id>
<updated>2014-08-20T14:06:12-07:00</updated>
<link href="/services/server/introspection/kvstore/serverstatus" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/kvstore/serverstatus" rel="list"/>
<content type="text/xml">
<s:dict/>
</content>
</entry>
server/introspection/kvstore/collectionstats GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/introspection/kvstore/collectionstats
XML Response
.
.
.
<title>kvstore-collectionstats</title> <id>https://localhost:8089/services/server/introspection/kvstore/collectionstats</id> <updated>2014-08-20T14:31:42-07:00</updated> <generator build="226873" version="6.2"/> <author>
<name>Splunk</name>
</author> ... opensearch nodes elided ... <s:messages/> <entry>
<title>collectionStats</title>
<id>https://localhost:8089/services/server/introspection/kvstore/collectionstats/collectionStats</id>
<updated>2014-08-20T14:31:42-07:00</updated>
<link href="/services/server/introspection/kvstore/collectionstats/collectionStats" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/kvstore/collectionstats/collectionStats" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="data">
<s:list>
<s:item>
{"ns":"search.kvstoredemo",
"count":0,
"size":0,
"storageSize":8192,
"numExtents":1,
"nindexes":2,
"lastExtentSize":8192,
"paddingFactor":1,
"systemFlags":1,
"userFlags":1,
"totalIndexSize":16352,
"indexSizes":{"_id_":8176,"_UserAndKeyUniqueIndex":8176},
"ok":1}
</s:item>
</s:list>
</s:key>
<s:key name="eai:acl"> ... elided ...</s:key>
</s:dict>
</content>
</entry>
server/introspection/kvstore/replicasetstats GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/introspection/kvstore/replicasetstats
XML Response
.
.
.
<title>kvstore-collectionstats</title> <id>https://localhost:8089/services/server/introspection/kvstore/collectionstats</id> <updated>2014-08-20T14:31:42-07:00</updated> <generator build="226873" version="6.2"/> <author>
<name>Splunk</name>
</author>
... opensearch nodes elided ... <s:messages/>
<entry>
<title>replicasetstats</title>
<id>https://localhost:8089/services/server/introspection/kvstore/replicasetstats/replicasetstats</id>
<updated>2014-08-20T14:31:42-07:00</updated>
<link href="/services/server/introspection/kvstore/replicasetstats/replicasetstats" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/kvstore/replicasetstats/replicasetstats" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="data">
<s:list>
<s:item>
{
"replSetStats": {
"set": "splunkrs",
"date": 1412203576000,
"myState": 2,
"syncingTo": "54.xxx.xxx.xxx:8191",
"members": [
{
"_id": 2,
"name": "54.xxx.xxx.xxx:8191",
"health": 1,
"state": 2,
"stateStr": "SECONDARY",
"uptime": 102409,
"optime": {
"t": 1412101153,
"i": 1
},
"optimeDate": 1412101153000,
"lastHeartbeat": 1412203575000,
"lastHeartbeatRecv": 1412203575000,
"pingMs": 1,
"syncingTo": "54.xxx.xxx.xxx:8191"
},
{
"_id": 3,
"name": "54.xxx.xxx.yyy:8191",
"health": 1,
"state": 2,
"stateStr": "SECONDARY",
"uptime": 102409,
"optime": {
"t": 1412101153,
"i": 1
},
"optimeDate": 1412101153000,
"lastHeartbeat": 1412203576000,
"lastHeartbeatRecv": 1412203575000,
"pingMs": 1,
"syncingTo": "54.xxx.xxx.yyy:8191"
},
.
.
.
elided
.
.
.
{
"_id": 17,
"name": "54.xxx.xxx.zzz:8191",
"health": 1,
"state": 2,
"stateStr": "SECONDARY",
"uptime": 102409,
"optime": {
"t": 1412101153,
"i": 1
},
"optimeDate": 1412101153000,
"lastHeartbeat": 1412203574000,
"lastHeartbeatRecv": 1412203575000,
"pingMs": 1,
"syncingTo": "54.xxx.xxx.zzz:8191"
}
],
"ok": 1
},
"oplogInfo": {
"start": 1412022009000,
"end": 1412101153000,
"collectionStats": {
"ns": "local.oplog.rs",
"count": 631,
"size": 166964,
"avgObjSize": 264,
"storageSize": 1048580080,
"numExtents": 3,
"nindexes": 0,
"lastExtentSize": 4096,
"paddingFactor": 1,
"systemFlags": 0,
"userFlags": 0,
"totalIndexSize": 0,
"indexSizes": {},
"capped": true,
"max": 9223372036854775808.000000,
"ok": 1
},
"sources": {}
}
}
</s:item>
</s:list>
</s:key>
<s:key name="eai:acl"> ... elided ...</s:key>
</s:dict>
</content>
</entry>
server/introspection/kvstore/serverstatus GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/introspection/kvstore/serverstatus
XML Response
.
.
.
<title>kvstore-serverstatus</title> <id>https://localhost:8089/services/server/introspection/kvstore/serverstatus</id> <updated>2014-08-20T14:26:42-07:00</updated> <generator build="226873" version="6.2"/> <author>
<name>Splunk</name>
</author> ... opensearch nodes elided ... <s:messages/> <entry>
<title>serverStatus</title>
<id>https://localhost:8089/services/server/introspection/kvstore/serverstatus/serverStatus</id>
<updated>2014-08-20T14:26:42-07:00</updated>
<link href="/services/server/introspection/kvstore/serverstatus/serverStatus" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/kvstore/serverstatus/serverStatus" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="data">
<![CDATA[{
"host":"localhost:8089", "version":"2.6.3", "pid":23009, "uptime":19049, "uptimeMillis":19049447, "uptimeEstimate":18295, "localTime":{"$date":1408570002615}, "asserts":{ "regular":0, "warning":0, "msg":0, "user":0, "rollovers":0}, "backgroundFlushing":{ "flushes":317, "total_ms":11523, "average_ms":36.350158, "last_ms":0, "last_finished":{"$date":1408569973325}}, "connections":{ "current":7, "available":3269, "totalCreated":7}, "cursors":{ "note":"deprecated, use server status metrics", "clientCursors_size":0, "totalOpen":0, "pinned":0, "totalNoTimeout":0, "timedOut":0}, "dur":{ "commits":30, "journaledMB":0, "writeToDataFilesMB":0, "compression":0, "commitsInWriteLock":0, "earlyCommits":0, "timeMs":{ "dt":3072, "prepLogBuffer":0, "writeToJournal":0, "writeToDataFiles":0, "remapPrivateView":0}}, "extra_info":{ "note":"fields vary by platform", "heap_usage_bytes":67624592, "page_faults":3}, "globalLock":{ "totalTime":19049447000, "lockTime":1491098, "currentQueue":{ "total":0, "readers":0, "writers":0}, "activeClients":{ "total":0, "readers":0, "writers":0}}, "indexCounters":{ "accesses":2, "hits":2, "misses":0, "resets":0, "missRatio":0}, "locks":{ ".":{ "timeLockedMicros":{ "R":2926340, "W":1491098}, "timeAcquiringMicros":{ "R":1458997, "W":342703}}, "admin":{ "timeLockedMicros":{ "r":103638, "w":0}, "timeAcquiringMicros":{ "r":13202, "w":0}}, "local":{ "timeLockedMicros":{ "r":426518, "w":237}, "timeAcquiringMicros":{ "r":185505, "w":12}}, "search.kvstoredemo":{ "timeLockedMicros":{ "r":2832888, "w":292}, "timeAcquiringMicros":{ "r":1310820, "w":17}}}, "network":{ "bytesIn":1133611, "bytesOut":11628162, "numRequests":12070}, "opcounters":{ "insert":1, "query":4760, "update":0, "delete":0, "getmore":0, "command":8264}, "opcountersRepl":{ "insert":0, "query":0, "update":0, "delete":0, "getmore":0, "command":0}, "recordStats":{ "accessesNotInMemory":0, "pageFaultExceptionsThrown":0, "admin":{ "accessesNotInMemory":0, "pageFaultExceptionsThrown":0}, "local":{ "accessesNotInMemory":0, "pageFaultExceptionsThrown":0}, "search.kvstoredemo":{ "accessesNotInMemory":0, "pageFaultExceptionsThrown":0}}, "writeBacksQueued":false, "mem":{ "bits":64, "resident":58, "virtual":325, "supported":true, "mapped":64, "mappedWithJournal":128}, "metrics":{ "cursor":{ "timedOut":0, "open":{ "noTimeout":0, "pinned":0, "total":0}}, "document":{ "deleted":0, "inserted":1, "returned":2, "updated":0}, "getLastError":{ "wtime":{ "num":0, "totalMillis":0}, "wtimeouts":0}, "operation":{ "fastmod":0, "idhack":0, "scanAndOrder":0}, "queryExecutor":{ "scanned":0, "scannedObjects":0}, "record":{"moves":0}, "repl":{ "apply":{ "batches":{ "num":0, "totalMillis":0}, "ops":0}, "buffer":{ "count":0, "maxSizeBytes":268435456, "sizeBytes":0}, "network":{ "bytes":0, "getmores":{ "num":0, "totalMillis":0}, "ops":0, "readersCreated":0}, "preload":{ "docs":{ "num":0, "totalMillis":0}, "indexes":{ "num":0, "totalMillis":0}}}, "storage":{ "freelist":{ "search":{ "bucketExhausted":0, "requests":0, "scanned":0}}}, "ttl":{ "deletedDocuments":0, "passes":317}}, "ok":1}]]>
</s:key>
<s:key name="eai:acl"> ... elided ... </s:key>
</s:dict>
</content>
</entry>
server/introspection/search/dispatch GET
XML
XML Request
curl -k -u username:password https://localhost:8089/services/server/introspection/search/dispatch
XML Response
<?xml-stylesheet type="text/xml" href="/static/atom.xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>introspection-dispatchreaper</title>
<id>https://localhost:8089/services/server/introspection/search/dispatch</id>
<updated>2015-08-27T13:49:04-07:00</updated>
<generator build="ced4408678cc212328ba3550d23cba87c24339d4" version="20150826"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/server/introspection/search/dispatch/_acl" rel="_acl"/>
<opensearch:totalResults>4</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>Bundle_Directory_Reaper</title>
<id>https://localhost:8089/services/server/introspection/search/dispatch/Bundle_Directory_Reaper</id>
<updated>2015-08-27T13:49:04-07:00</updated>
<link href="/services/server/introspection/search/dispatch/Bundle_Directory_Reaper" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/search/dispatch/Bundle_Directory_Reaper" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="Bundle_Directory_Reaper_Average_Time(ms)">1.000000</s:key>
<s:key name="Bundle_Directory_Reaper_Max_Time(ms)">1</s:key>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">1</s:key>
<s:key name="can_write">1</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>Compute_User_Search_Quota</title> <id>https://localhost:8089/services/server/introspection/search/dispatch/Compute_User_Search_Quota</id>
<updated>2015-08-27T13:49:04-07:00</updated>
<link href="/services/server/introspection/search/dispatch/Compute_User_Search_Quota" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/search/dispatch/Compute_User_Search_Quota" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="Compute_User_Search_Quota_Average_Time(ms)">2.500000</s:key>
<s:key name="Compute_User_Search_Quota_Max_Time(ms)">4</s:key>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">1</s:key>
<s:key name="can_write">1</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>Dispatch_Directory_Reaper</title>
<id>https://localhost:8089/services/server/introspection/search/dispatch/Dispatch_Directory_Reaper</id>
<updated>2015-08-27T13:49:04-07:00</updated>
<link href="/services/server/introspection/search/dispatch/Dispatch_Directory_Reaper" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/search/dispatch/Dispatch_Directory_Reaper" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="Dispatch_Directory_Reaper_Average_Time(ms)">5.400000</s:key>
<s:key name="Dispatch_Directory_Reaper_Max_Time(ms)">16</s:key>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">1</s:key>
<s:key name="can_write">1</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>Search_StartUp_Time</title>
<id>https://localhost:8089/services/server/introspection/search/dispatch/Search_StartUp_Time</id>
<updated>2015-08-27T13:49:04-07:00</updated>
<link href="/services/server/introspection/search/dispatch/Search_StartUp_Time" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/search/dispatch/Search_StartUp_Time" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="Search_StartUp_Time_Average_Time(ms)">136.750000</s:key>
<s:key name="Search_StartUp_Time_Max_Time(ms)">185</s:key>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">1</s:key>
<s:key name="can_write">1</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
</feed>
server/introspection/search/dispatch/Bundle_Directory_Reaper GET
XML
XML Request
curl -k -u username:password https://localhost:8089/services/server/introspection/search/dispatch/Bundle_Directory_Reaper
XML Response
<?xml-stylesheet type="text/xml" href="/static/atom.xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>introspection-dispatchreaper</title>
<id>https://localhost:8089/services/server/introspection/search//dispatch</id>
<updated>2015-08-26T14:24:43-07:00</updated>
<generator build="ced4408678cc212328ba3550d23cba87c24339d4" version="20150826"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/server/introspection/search//dispatch/_acl" rel="_acl"/>
<opensearch:totalResults>1</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>Bundle_Directory_Reaper</title>
<id>https://localhost:8089/services/server/introspection/search//dispatch/Bundle_Directory_Reaper</id>
<updated>2015-08-26T14:24:43-07:00</updated>
<link href="/services/server/introspection/search//dispatch/Bundle_Directory_Reaper" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/search//dispatch/Bundle_Directory_Reaper" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="Bundle_Directory_Reaper_Average_Time(ms)">1.000000</s:key>
<s:key name="Bundle_Directory_Reaper_Max_Time(ms)">1</s:key>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">0</s:key>
<s:key name="can_write">1</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
<s:key name="eai:attributes">
<s:dict>
<s:key name="optionalFields">
<s:list/>
</s:key>
<s:key name="requiredFields">
<s:list/>
</s:key>
<s:key name="wildcardFields">
<s:list/>
</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
</feed>
server/introspection/search/dispatch/Compute_User_Search_Quota GET
XML
XML Request
curl -k -u username:password https://localhost:8089/services/server/introspection/search/dispatch/Compute_User_Search_Quota
XML Response
<?xml-stylesheet type="text/xml" href="/static/atom.xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>introspection-dispatchreaper</title>
<id>https://localhost:8089/services/server/introspection/search/dispatch</id>
<updated>2015-08-26T14:33:46-07:00</updated>
<generator build="ced4408678cc212328ba3550d23cba87c24339d4" version="20150826"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/server/introspection/search/dispatch/_acl" rel="_acl"/>
<opensearch:totalResults>1</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>Compute_User_Search_Quota</title>
<id>https://localhost:8089/services/server/introspection/search/dispatch/Compute_User_Search_Quota</id>
<updated>2015-08-26T14:33:46-07:00</updated>
<link href="/services/server/introspection/search/dispatch/Compute_User_Search_Quota" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/search/dispatch/Compute_User_Search_Quota" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="Compute_User_Search_Quota_Average_Time(ms)">1.950000</s:key>
<s:key name="Compute_User_Search_Quota_Max_Time(ms)">4</s:key>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">0</s:key>
<s:key name="can_write">1</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
<s:key name="eai:attributes">
<s:dict>
<s:key name="optionalFields">
<s:list/>
</s:key>
<s:key name="requiredFields">
<s:list/>
</s:key>
<s:key name="wildcardFields">
<s:list/>
</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
</feed>
server/introspection/search/dispatch/Dispatch_Directory_Reaper GET
XML
XML Request
curl -k -u username:password https://localhost:8089/services/server/introspection/search/dispatch/Dispatch_Directory_Reaper
XML Response
<?xml-stylesheet type="text/xml" href="/static/atom.xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>introspection-dispatchreaper</title>
<id>https://localhost:8089/services/server/introspection/search/dispatch</id>
<updated>2015-08-26T14:34:41-07:00</updated>
<generator build="ced4408678cc212328ba3550d23cba87c24339d4" version="20150826"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/server/introspection/search/dispatch/_acl" rel="_acl"/>
<opensearch:totalResults>1</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>Dispatch_Directory_Reaper</title>
<id>https://localhost:8089/services/server/introspection/search/dispatch/Dispatch_Directory_Reaper</id>
<updated>2015-08-26T14:34:41-07:00</updated>
<link href="/services/server/introspection/search/dispatch/Dispatch_Directory_Reaper" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/search/dispatch/Dispatch_Directory_Reaper" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="Dispatch_Directory_Reaper_Average_Time(ms)">4.500000</s:key>
<s:key name="Dispatch_Directory_Reaper_Max_Time(ms)">10</s:key>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">0</s:key>
<s:key name="can_write">1</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
<s:key name="eai:attributes">
<s:dict>
<s:key name="optionalFields">
<s:list/>
</s:key>
<s:key name="requiredFields">
<s:list/>
</s:key>
<s:key name="wildcardFields">
<s:list/>
</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
</feed>
server/introspection/search/dispatch/Search_StartUp_Time GET
XML
XML Request
curl -k -u username:password https://localhost:8089/services/server/introspection/search/dispatch/Search_StartUp_Time
XML Response
<?xml-stylesheet type="text/xml" href="/static/atom.xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>introspection-dispatchreaper</title>
<id>https://localhost:8089/services/server/introspection/search//dispatch</id>
<updated>2015-08-26T14:25:14-07:00</updated>
<generator build="ced4408678cc212328ba3550d23cba87c24339d4" version="20150826"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/server/introspection/search//dispatch/_acl" rel="_acl"/>
<opensearch:totalResults>1</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>Search_StartUp_Time</title>
<id>https://localhost:8089/services/server/introspection/search//dispatch/Search_StartUp_Time</id>
<updated>2015-08-26T14:25:14-07:00</updated>
<link href="/services/server/introspection/search//dispatch/Search_StartUp_Time" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/search//dispatch/Search_StartUp_Time" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="Search_StartUp_Time_Average_Time(ms)">128.619048</s:key>
<s:key name="Search_StartUp_Time_Max_Time(ms)">171</s:key>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">0</s:key>
<s:key name="can_write">1</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
<s:key name="eai:attributes">
<s:dict>
<s:key name="optionalFields">
<s:list/>
</s:key>
<s:key name="requiredFields">
<s:list/>
</s:key>
<s:key name="wildcardFields">
<s:list/>
</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
</feed>
server/introspection/search/distributed GET
XML
XML Request
curl -k -u username:password https://localhost:8089/services/server/introspection/search/distributed
XML Response
<?xml-stylesheet type="text/xml" href="/static/atom.xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>search-distributedmetrics</title>
<id>https://localhost:8089/services/server/introspection/search/distributed</id>
<updated>2015-08-26T14:35:48-07:00</updated>
<generator build="ced4408678cc212328ba3550d23cba87c24339d4" version="20150826"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/server/introspection/search/distributed/_acl" rel="_acl"/>
<opensearch:totalResults>3</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>per_searchhead_metrics</title>
<id>https://localhost:8089/services/server/introspection/search/distributed/per_searchhead_metrics</id>
<updated>2015-08-26T14:35:48-07:00</updated>
<link href="/services/server/introspection/search/distributed/per_searchhead_metrics" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/search/distributed/per_searchhead_metrics" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">0</s:key>
<s:key name="can_write">0</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list/>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>localhost:8089</title>
<id>https://localhost:8089/services/server/introspection/search/distributed/peer.sv.splunk.com%3A10017</id>
<updated>2015-08-26T14:35:48-07:00</updated>
<link href="/services/server/introspection/search/distributed/peer.sv.splunk.com%3A10017" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/search/distributed/peer.sv.splunk.com%3A10017" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="Get_Authentication_Max_Time(ms)">4</s:key>
<s:key name="Get_Authentication_Mean_Time(ms)">3.400000</s:key>
<s:key name="Get_BundleList_Max_Time(ms)">5</s:key>
<s:key name="Get_BundleList_Mean_Time(ms)">3.800000</s:key>
<s:key name="Get_ServerInfo_Max_Time(ms)">14</s:key>
<s:key name="Get_ServerInfo_Mean_Time(ms)">9.300000</s:key>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">0</s:key>
<s:key name="can_write">0</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list/>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>window_metrics</title>
<id>https://localhost:8089/services/server/introspection/search/distributed/window_metrics</id>
<updated>2015-08-26T14:35:48-07:00</updated>
<link href="/services/server/introspection/search/distributed/window_metrics" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/search/distributed/window_metrics" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="average_bytes">0.000000</s:key>
<s:key name="average_msecs">0.000000</s:key>
<s:key name="count">0</s:key>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">0</s:key>
<s:key name="can_write">0</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>*</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list/>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
</s:dict>
</content>
</entry>
</feed>
server/introspection/search/saved GET
XML
XML Request
curl -k -u admin:pass https://localhost:8089/services/server/introspection/search/saved
XML Response
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>introspection-savedsearches</title>
<id>https://localhost:8089/services/server/introspection/search/saved</id>
<updated>2015-06-03T16:41:21-07:00</updated>
<generator build="6cfc0237739f" version="6.3.0"/>
<author>
<name>Splunk</name>
</author>
<link href="/services/server/introspection/search/saved/_acl" rel="_acl"/>
<opensearch:totalResults>2</opensearch:totalResults>
<opensearch:itemsPerPage>30</opensearch:itemsPerPage>
<opensearch:startIndex>0</opensearch:startIndex>
<s:messages/>
<entry>
<title>admin;search;search_1</title>
<id>https://localhost:8089/services/server/introspection/search/saved/admin%3Bsearch%3Bsearch_1</id>
<updated>2015-06-03T16:41:21-07:00</updated>
<link href="/services/server/introspection/search/saved/admin%3Bsearch%3Bsearch_1” rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/search/saved/admin%3Bsearch%3Bsearch_1” rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="disabled">0</s:key>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">1</s:key>
<s:key name="can_write">1</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>admin</s:item>
<s:item>splunk-system-role</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list/>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
<s:key name="final_score">1433294868</s:key>
<s:key name="name">search_1</s:key>
<s:key name="orig_score">1433374860</s:key>
<s:key name="owner">admin</s:key>
<s:key name="priority_no">1</s:key>
<s:key name="real_time_adj">-80000</s:key>
<s:key name="runtime_adj">8</s:key>
<s:key name="skipped_adj">0</s:key>
<s:key name="window_adj">0</s:key>
</s:dict>
</content>
</entry>
<entry>
<title>nobody;search;Errors in the last hour</title>
<id>https://localhost:8089/services/server/introspection/search/saved/nobody%3Bsearch%3BErrors%20in%20the%20last%20hour</id>
<updated>2015-06-03T16:41:21-07:00</updated>
<link href="/services/server/introspection/search/saved/nobody%3Bsearch%3BErrors%20in%20the%20last%20hour" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/introspection/search/saved/nobody%3Bsearch%3BErrors%20in%20the%20last%20hour" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="disabled">0</s:key>
<s:key name="eai:acl">
<s:dict>
<s:key name="app"></s:key>
<s:key name="can_list">1</s:key>
<s:key name="can_write">1</s:key>
<s:key name="modifiable">0</s:key>
<s:key name="owner">system</s:key>
<s:key name="perms">
<s:dict>
<s:key name="read">
<s:list>
<s:item>admin</s:item>
<s:item>splunk-system-role</s:item>
</s:list>
</s:key>
<s:key name="write">
<s:list/>
</s:key>
</s:dict>
</s:key>
<s:key name="removable">0</s:key>
<s:key name="sharing">system</s:key>
</s:dict>
</s:key>
<s:key name="final_score">1433294980</s:key>
<s:key name="name">Errors in the last hour</s:key>
<s:key name="orig_score">1433374860</s:key>
<s:key name="owner">nobody</s:key>
<s:key name="priority_no">2</s:key>
<s:key name="real_time_adj">-80000</s:key>
<s:key name="runtime_adj">1</s:key>
<s:key name="skipped_adj">0</s:key>
<s:key name="window_adj">119</s:key>
</s:dict>
</content>
</entry>
</feed>
server/status GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status
XML Response
.
.
.
<title></title>
<id>https://localhost:8089/services/server/status</id>
<updated>2014-03-25T13:52:59-07:00</updated>
<generator build="200839" version="6.1"/>
<author>
<name>Splunk</name>
</author>
<s:messages/>
<entry>
<title>dispatch-artifacts</title>
<id>https://localhost:8089/services/server/status/dispatch-artifacts</id>
<updated>2014-03-25T13:52:59-07:00</updated>
<link href="/services/server/status/dispatch-artifacts" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/status/dispatch-artifacts" rel="list"/>
<content type="text/xml">
<s:dict/>
</content>
</entry>
<entry>
<title>fishbucket</title>
<id>https://localhost:8089/services/server/status/fishbucket</id>
<updated>2014-03-25T13:52:59-07:00</updated>
<link href="/services/server/status/fishbucket" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/status/fishbucket" rel="list"/>
<content type="text/xml">
<s:dict/>
</content>
</entry>
<entry>
<title>partitions-space</title>
<id>https://localhost:8089/services/server/status/partitions-space</id>
<updated>2014-03-25T13:52:59-07:00</updated>
<link href="/services/server/status/partitions-space" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/status/partitions-space" rel="list"/>
<content type="text/xml">
<s:dict/>
</content>
</entry>
server/status/dispatch-artifacts GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status/dispatch-artifacts
XML Response
.
.
.
<title>introspection--disk-objects--search-dispatch-artifacts</title>
<id>https://localhost:8089/services/server/status/dispatch-artifacts</id>
<updated>2014-03-25T11:10:33-07:00</updated>
<generator build="200839" version="6.1"/>
<author>
<name>Splunk</name>
</author>
... opensearch elements elided ...
<s:messages/>
<entry>
<title>result</title>
<id>https://localhost:8089/services/server/status/dispatch-artifacts/result</id>
<updated>2014-03-25T11:10:33-07:00</updated>
<link href="/services/server/status/dispatch-artifacts/result" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/status/dispatch-artifacts/result" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="count_realtime">0</s:key>
<s:key name="count_scheduled">0</s:key>
<s:key name="count_summary">0</s:key>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="top_apps"/>
<s:key name="top_named_searches"/>
<s:key name="top_users"/>
<s:key name="total_count">0</s:key>
</s:dict>
</content>
</entry>
server/status/fishbucket GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status/fishbucket
XML Response
.
.
.
<title>introspection--disk-objects--fishbucket</title>
<id>https://localhost:8089/services/server/status/fishbucket</id>
<updated>2014-03-25T11:31:10-07:00</updated>
<generator build="200839" version="6.1"/>
<author>
<name>Splunk</name>
</author>
... opensearch elements elided ...
<s:messages/>
<entry>
<title>result</title>
<id>https://localhost:8089/services/server/status/fishbucket/result</id>
<updated>2014-03-25T11:31:10-07:00</updated>
<link href="/services/server/status/fishbucket/result" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/status/fishbucket/result" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="key_count">0</s:key>
<s:key name="total_size">0.000</s:key>
</s:dict>
</content>
</entry>
server/status/limits/search-concurrency GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status/limits/search-concurrency
XML Response
.
.
.
<title>server-status-limits-concurrency</title>
<id>https://localhost:8089/services/server/status/limits/search-concurrency</id>
<updated>2014-03-25T11:40:16-07:00</updated>
<generator build="200839" version="6.1"/>
<author>
<name>Splunk</name>
</author>
... opensearch elements elided ...
<s:messages/>
<entry>
<title>search-concurrency</title>
<id>https://localhost:8089/services/server/status/limits/search-concurrency/search-concurrency</id>
<updated>2014-03-25T11:40:16-07:00</updated>
<link href="/services/server/status/limits/search-concurrency/search-concurrency" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/status/limits/search-concurrency/search-concurrency" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="max_auto_summary_searches">2</s:key>
<s:key name="max_hist_scheduled_searches">5</s:key>
<s:key name="max_hist_searches">10</s:key>
<s:key name="max_rt_scheduled_searches">5</s:key>
<s:key name="max_rt_searches">10</s:key>
</s:dict>
</content>
</entry>
server/status/partitions-space GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status/partitions-space
XML Response
.
.
.
<title>introspection--disk-objects--partitions-space</title>
<id>https://localhost:8089/services/server/status/partitions-space</id>
<updated>2014-03-25T11:43:39-07:00</updated>
<generator build="200839" version="6.1"/>
<author>
<name>Splunk</name>
</author>
... opensearch elements elided ...
<s:messages/>
<entry>
<title>0</title>
<id>https://localhost:8089/services/server/status/partitions-space/0</id>
<updated>2014-03-25T11:43:39-07:00</updated>
<link href="/services/server/status/partitions-space/0" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/status/partitions-space/0" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="capacity">104901.000</s:key>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="free">7774.000</s:key>
<s:key name="fs_type">ntfs</s:key>
<s:key name="mount_point">C:\</s:key>
</s:dict>
</content>
</entry>
server/status/resource-usage GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status/resource-usage
XML Response
.
.
.
<title></title>
<id>https://localhost:8089/services/server/status/resource-usage</id>
<updated>2014-03-25T11:53:26-07:00</updated>
<generator build="200839" version="6.1"/>
<author>
<name>Splunk</name>
</author>
<s:messages/>
<entry>
<title>hostwide</title>
<id>https://localhost:8089/services/server/status/resource-usage/hostwide</id>
<updated>2014-03-25T11:53:26-07:00</updated>
<link href="/services/server/status/resource-usage/hostwide" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/status/resource-usage/hostwide" rel="list"/>
<content type="text/xml">
<s:dict/>
</content>
</entry>
<entry>
<title>splunk-processes</title>
<id>https://localhost:8089/services/server/status/resource-usage/splunk-processes</id>
<updated>2014-03-25T11:53:26-07:00</updated>
<link href="/services/server/status/resource-usage/splunk-processes" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/status/resource-usage/splunk-processes" rel="list"/>
<content type="text/xml">
<s:dict/>
</content>
</entry>
server/status/resource-usage/hostwide GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status/resource-usage/hostwide
XML Response
.
.
.
<title></title>
<id>https://localhost:8089/services/server/status/resource-usage</id>
<updated>2014-03-25T11:53:26-07:00</updated>
<generator build="200839" version="6.1"/>
<author>
<name>Splunk</name>
</author>
<s:messages/>
<entry>
<title>hostwide</title>
<id>https://localhost:8089/services/server/status/resource-usage/hostwide</id>
<updated>2014-03-25T11:53:26-07:00</updated>
<link href="/services/server/status/resource-usage/hostwide" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/status/resource-usage/hostwide" rel="list"/>
<content type="text/xml">
<s:dict/>
</content>
</entry>
<entry>
<title>splunk-processes</title>
<id>https://localhost:8089/services/server/status/resource-usage/splunk-processes</id>
<updated>2014-03-25T11:53:26-07:00</updated>
<link href="/services/server/status/resource-usage/splunk-processes" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/status/resource-usage/splunk-processes" rel="list"/>
<content type="text/xml">
<s:dict/>
</content>
</entry>
server/status/resource-usage/splunk-processes GET
XML
XML Request
curl -k -u admin:changeme https://localhost:8089/services/server/status/resource-usage/splunk-processes/0
XML Response
.
.
.
<feed xmlns="http://www.w3.org/2005/Atom" xmlns:s="http://dev.splunk.com/ns/rest" xmlns:opensearch="http://a9.com/-/spec/opensearch/1.1/">
<title>introspection--resource-usage--splunk-processes</title>
<id>https://localhost:8089/services/server/status/resource-usage/splunk-processes</id>
<updated>2014-03-26T13:35:52-07:00</updated>
<generator build="200839" version="6.1"/>
<author>
<name>Splunk</name>
</author>
... opensearch elements elided ...
<s:messages/>
<entry>
<title>0</title>
<id>https://localhost:8089/services/server/status/resource-usage/splunk-processes/0</id>
<updated>2014-03-26T13:35:52-07:00</updated>
<link href="/services/server/status/resource-usage/splunk-processes/0" rel="alternate"/>
<author>
<name>system</name>
</author>
<link href="/services/server/status/resource-usage/splunk-processes/0" rel="list"/>
<content type="text/xml">
<s:dict>
<s:key name="args"> instrument-resource-usage</s:key>
<s:key name="eai:acl">
... elided ...
</s:key>
<s:key name="eai:attributes">
<s:dict>
<s:key name="optionalFields">
<s:list/>
</s:key>
<s:key name="requiredFields">
<s:list/>
</s:key>
<s:key name="wildcardFields">
<s:list/>
</s:key>
</s:dict>
</s:key>
<s:key name="elapsed">619262.3610</s:key>
<s:key name="mem_used">15.762</s:key>
<s:key name="page_faults">12001684</s:key>
<s:key name="pct_memory">0.40</s:key>
<s:key name="pid">4256</s:key>
<s:key name="ppid">2476</s:key>
<s:key name="process">splunkd</s:key>
<s:key name="t_count">4</s:key>
</s:dict>
</content>
</entry>
</feed>
|
PREVIOUS Introspection endpoint descriptions |
NEXT Knowledge endpoint descriptions |
This documentation applies to the following versions of Splunk® Enterprise: 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.3.12, 6.3.13, 6.3.14
Feedback submitted, thanks!