We've recently upgraded one of our Splunk Indexers to version 5.0.2
The problem is that this specific indexer was servicing a legacy Ruby on Rails dashboard that created extremely pretty graphs using (I think) the REST API from that specific indexer.
The developer who created it is no longer with us, and my Ruby knowledge is very... limited.
My first instinct was to look for what exactly changed between Splunk 4.3.3 and 5.0.2 and it seems there were changes to a lot of the endpoints. Then I read this in the release notes:
Beginning with this release, the REST API is fully versioned, so that if developers embed the version number in a URL, they are guaranteed a particular endpoint behavior. In addition, REST endpoints optionally can now return JSON instead of XML.
Great, so probably, all I have to do is include the previous version number in the URL and everything should be back to the way it was, right?
Only, I cannot find an example anywhere on how to include the version in the URL.
Can someone provide me with an example?