https://community.splunk.com/t5/Getting-Data-In/How-to-automatically-call-REST-API-on-specific-event-field/m-p/586638#M103111 <P>I have an external API subscription that I want to call when a specific field in my Splunk event is present (e.g. City_Name). The REST API call would query the external API for &lt;City_Name&gt; and add the returned data (in JSON format) into Splunk to enrich the event.</P> <P>I've seen something similar with using "lookup" but looking for a tutorial on how to build this so that when the event field is present, the external API can be called to download the additional enrichment data.</P> <P>Suggestions / tutorials on how I might go about implementing this in Splunk?</P> <P>Thanks.</P> Fri, 25 Feb 2022 18:35:34 GMT Autom8teMe 2022-02-25T18:35:34Z https://community.splunk.com/t5/Getting-Data-In/How-to-automatically-call-REST-API-on-specific-event-field/m-p/586638#M103111 <P>I have an external API subscription that I want to call when a specific field in my Splunk event is present (e.g. City_Name). The REST API call would query the external API for &lt;City_Name&gt; and add the returned data (in JSON format) into Splunk to enrich the event.</P> <P>I've seen something similar with using "lookup" but looking for a tutorial on how to build this so that when the event field is present, the external API can be called to download the additional enrichment data.</P> <P>Suggestions / tutorials on how I might go about implementing this in Splunk?</P> <P>Thanks.</P> Fri, 25 Feb 2022 18:35:34 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-automatically-call-REST-API-on-specific-event-field/m-p/586638#M103111 Autom8teMe 2022-02-25T18:35:34Z