This nine hour course teaches you how to use the Splunk REST API to accomplish tasks interacting with Splunk servers. In this course, you will use curl and Python to send requests to Splunk REST endpoints and will learn how to parse and use the results. The course will show you how to create a variety of objects in Splunk, how to change properties, work with and apply security to Splunk objects, run different types of searches and parse its results, ingest data using the HTTP Event Collector and manipulate collections and KV Stores.

• Introduction to the Splunk REST API
• Namespaces and Object Management
• Parsing Output
• Oneshot Searching
• Normal and Export Searching
• Advanced Searching and Job Management
• Working with KV Stores
• Using the HTTP Event Collector

To be successful, students should have a solid understanding of the following courses:

• Splunk Fundamentals 1
• Splunk Fundamentals 2

OR the following single-subject courses:

Students should also have completed the following course:

Module 1 – Introduction to the Splunk REST API

• Use the proper case in searches
  
• Introduce the Splunk development environment and its REST endpoints
  
• Know to which Splunk server you should be connected to accomplish a desired task
  
• Authenticate with a Splunk server, with and without a session

Module 2 – Namespaces and Object Management

Module 3 – Parsing Output

Module 4 – Oneshot Searches

Module 5–Normal and Export Searching　

Module 6 – Advanced Searching and Job Management

Module 7 – Working with the KV Store

Module 8 – Using the HTTP Event Collector (HEC)