topic Re: Support for Custom Data Model in Getting Data In

Support for Custom Data Model

ez-secops-awn — Mon, 14 Jul 2025 16:39:09 GMT

I would greatly appreciate support for customer model as a correlation search option in the VT4splunk app.

Re: Support for Custom Data Model

PickleRick — Mon, 14 Jul 2025 19:23:36 GMT

What do you mean by that?

1. This is a third-party provided app so it's the creators who are capable of adding anything to its code.

2. As far as I can see, the app provides some custom search commands. What does it have to do (or what it should have to do) with data models?

3. What does it all have to do with correlation searches? You can use the app-provided commands in correlation searches. What more do you expect?

Re: Support for Custom Data Model

livehybrid — Mon, 14 Jul 2025 21:46:00 GMT

Hi @ez-secops-awn

I would suggest reaching out directly to VirusTotal who created this app as they may be able to add it as a future feature request. Their contact details are contact@virustotal.com

🌟 Did this answer help you? If so, please consider:

Adding karma to show it was useful
Marking it as the solution if it resolved your issue
Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

Re: Support for Custom Data Model

ez-secops-awn — Thu, 17 Jul 2025 14:11:16 GMT

You are probably not aware but the flow from using the app to discussing issues leads here, to this forum. This is the workflow according to the prompts and ui.

You also might not have noticed that that app is the tagged association. Perhaps the creator watches the forums for their own app? I would if I was them.

I hope you never reply to one of my questions again. You're as helpful and as welcome as a rotten egg.

Re: Support for Custom Data Model

ez-secops-awn — Thu, 17 Jul 2025 14:11:53 GMT

Thanks, that's helpful! I was hoping they would be watching here for their app being tagged.

Re: Support for Custom Data Model

PrewinThomas — Fri, 18 Jul 2025 04:27:26 GMT

@ez-secops-awn

If you'd like to see native support for this feature, I recommend reaching out to VirusTotal directly by emailing contact@virustotal.com
You can also submit a feature request through their contact form to ensure it's considered through all available channels:
#https://www.virustotal.com/gui/contact-us/premium-services
Support contact details #https://docs.virustotal.com/docs/vt4splunk-guide

Regards,
Prewin
Splunk Enthusiast | Always happy to help! If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!