Use the /services/streams/ endpoint to access streaming search results, such as Live Tail. For specific search results in other formats, use the search endpoint.
SearchThe /services/streams/search endpoint provides synchronous event search streaming service.
GETExecutes a simple search (no pipe support).
| Argument | Purpose |
| q | The simple search string to execute (with no leading 'search' command).. |
Response codes:
| Response | Status |
| 200 | Method executed successfully. |
The return content is raw event text in streaming format. There is no formatting, or timestamping on the data. Close the client connection to stop the search.
LivetailThe /services/streams/livetail endpoint provides synchronous data input tailing service.
GETStreams raw data being received by Splunk
| Argument | Purpose |
| q | The simple search string to execute (with no leading 'search' command). |
Response codes:
| Response | Status |
| 200 | Method executed successfully. |
The return content is raw event text in streaming format. There is no formatting, or timestamping on the data. Close the client connection to stop the search.
Comments
No comments have been submitted.