# Httpjson Input

**URL:** <https://discuss.elastic.co/t/httpjson-input/310884>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [July 28, 2022, 2:37pm UTC](https://discuss.elastic.co/t/httpjson-input/310884 "2022-07-28T14:37:38Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Hani\_Atalla](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hani_atalla/32/108542_2.png) [@Hani\_Atalla](https://discuss.elastic.co/u/Hani_Atalla)\
**Post date:** [July 28, 2022, 2:37pm UTC](https://discuss.elastic.co/t/httpjson-input/310884/1 "2022-07-28T14:37:38Z")

</div>

I am configuring an HTTPJSON Input from Fleet using the UI and doing a POST on a REST endpoint. I need to send a body in the request. The documentation isn't too clear about the format it should be in inside the request body field in the UI. The name/value fields I need to submit in the HTTPJSON request body from the UI are:

```auto
search=search index=phantom_container earliest=-7d | head 100 | addinfo 
output_mode=json

```

 ![Screen Shot 2022-07-28 at 10.36.05 AM](https://us1.discourse-cdn.com/elastic/original/3X/d/c/dca7d0611f8c1cea7fb793c228c5b3d9857f10ec.png)

The endpoint the HTTPJSON Input hits is Splunk's search API and I am trying to ingest the JSON response from the Splunk search in Elasticsearch

Thanks for your help.

Hani

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 25, 2022, 4:37pm UTC](https://discuss.elastic.co/t/httpjson-input/310884/2 "2022-08-25T16:37:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.