How it works...

The REST API is a core part of Splunk and is used to do everything from authenticating, to searching, to configuration management. As you have seen in another recipe of this chapter, you can interact with the REST API very easily with simple command-line tools.

Organizations that maintain their own line of business applications and are looking to integrate the operational intelligence they can get out of Splunk can do so by leveraging the SDK for the language that their application is written in. Splunk has created SDKs for many of the mainstream programming languages. Python was the first one developed and released, since a large amount of Splunk is developed using Python.

The SDK is a wrapper around calls to the REST API ...

Get Splunk Operational Intelligence Cookbook - Third Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.