Skip to main content
Splunk® Enterprise

REST API Reference Manual

Splunk® Enterprise
9.1.6

Output endpoint descriptions

Manage data from forwarders.

Usage details

Review ACL information for an endpoint

To check Access Control List (ACL) properties for an endpoint, append /acl to the path. For more information see Access Control List in the REST API User Manual.

Authentication and Authorization

Username and password authentication is required for access to endpoints and REST operations.

Splunk users must have role and/or capability-based authorization to use REST endpoints. Users with an administrative role, such as admin, can access authorization information in Splunk Web. To view the roles assigned to a user, select Settings > Access controls and click Users. To determine the capabilities assigned to a role, select Settings > Access controls and click Roles.

App and user context

Typically, knowledge objects, such as saved searches or event types, have an app/user context that is the namespace. For more information about specifying a namespace, see Namespace in the REST API User Manual.

Splunk Cloud Platform limitations

As a Splunk Cloud Platform user, you are restricted to interacting with the search tier only with the REST API. Output endpoints are generally not accessible in Splunk Cloud Platform.

See Access requirements and limitations for the Splunk Cloud Platform REST API in the the REST API Tutorials manual for more information.


data/outputs/tcp/default

https://<host>:<mPort>/services/data/outputs/tcp/default

Access to global tcpout properties.


GET

Expand

Returns the current tcpout properties.


POST

Expand

Configure global tcpout properties.


data/outputs/tcp/default/{name}

https://<host>:<mPort>/services/data/outputs/tcp/default/{name}

Manage forwarder settings.


DELETE

Expand

Disable the default forwarding settings.


GET

Expand

Retrieve the named configuration.


POST

Expand

Configure global forwarding properties.


data/outputs/tcp/group

https://<host>:<mPort>/services/data/outputs/tcp/group

Access to the configuration of a group of one or more data forwarding destinations.

Authentication and Authorization

  • GET requires list_forwarders capability.
  • POST requires edit_forwarders capability.


GET

Expand

Get configuration information about target groups.


POST

Expand

Configure a group of one or more data forwarding destinations.


data/outputs/tcp/group/{name}

https://<host>:<mPort>/services/data/outputs/tcp/group/{name}

Manage the {name} target group.

Authentication and Authorization

  • GET requires list_forwarders capability.
  • POST and DELETE require edit_forwarders capability.


DELETE

Expand

Deletes the target group specified by {name}.


GET

Expand

Get configuration information about the target group specified by {name}.


POST

Expand

Update the configuration of the target group.


data/outputs/tcp/server

https://<host>:<mPort>/services/data/outputs/tcp/server

Access data forwarding configurations.


GET

Expand

List existing forwarded servers.


POST

Expand

Creates a new forwarder output.


data/outputs/tcp/server/{name}

https://<host>:<mPort>/services/data/outputs/tcp/server/{name}

Manage the {name} forwarder.


DELETE

Expand

Deletes the configuration for the {name} forwarded server.


GET

Expand

Lists information for the {name} forwarded server.


POST

Expand

Configures the forwarded server specified by {name}.


data/outputs/tcp/server/{name}/allconnections

https://<host>:<mPort>/services/data/outputs/tcp/server/{name}/allconnections


Get {name} forwarder connections.


GET

Expand

List current connections to the {name} forwarded server.


data/outputs/tcp/syslog

https://<host>:<mPort>/services/data/outputs/tcp/syslog

Access the configuration of a forwarded server configured to provide data in standard syslog format.


GET

Expand

Provides access to syslog data forwarding configurations.


POST

Expand

Configures a forwarder to send data in standard syslog format


data/outputs/tcp/syslog/{name}

https://<host>:<mPort>/services/data/outputs/tcp/syslog/{name}

Manage configuration for the {name} forwarder.


DELETE

Expand

Deletes the configuration for the {name} forwarder.


GET

Expand

Returns configuration information for the {name} forwarder.


POST

Expand

Updates the configuration of the {name} forwarder.


Last modified on 12 October, 2021
Metrics Catalog endpoint descriptions   Search endpoint descriptions

This documentation applies to the following versions of Splunk® Enterprise: 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.13, 7.1.0, 7.1.1, 7.1.2, 7.1.3, 7.1.4, 7.1.5, 7.1.6, 7.1.7, 7.1.8, 7.1.9, 7.1.10, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.3.0, 7.3.1, 7.3.2, 7.3.3, 7.3.4, 7.3.5, 7.3.6, 7.3.7, 7.3.8, 7.3.9, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.0.4, 8.0.5, 8.0.6, 8.0.7, 8.0.8, 8.0.9, 8.0.10, 8.1.0, 8.1.1, 8.1.2, 8.1.3, 8.1.4, 8.1.5, 8.1.6, 8.1.7, 8.1.8, 8.1.9, 8.1.10, 8.1.11, 8.1.12, 8.1.13, 8.1.14, 8.2.0, 8.2.1, 8.2.2, 8.2.3, 8.2.4, 8.2.5, 8.2.6, 8.2.7, 8.2.8, 8.2.9, 8.2.10, 8.2.11, 8.2.12, 9.0.0, 9.0.1, 9.0.2, 9.0.3, 9.0.4, 9.0.5, 9.0.6, 9.0.7, 9.0.8, 9.0.9, 9.0.10, 9.1.0, 9.1.1, 9.1.2, 9.1.3, 9.1.4, 9.1.5, 9.1.6, 9.1.7, 9.2.0, 9.2.1, 9.2.2, 9.2.3, 9.2.4, 9.3.0, 9.3.1, 9.3.2, 9.4.0


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters