https://community.splunk.com/t5/Getting-Data-In/How-to-optimize-script-in-Splunk/m-p/447792#M77872 <P>You're going to have to provide a lot more detail that what you've described so far.<BR /><BR /> What is the API?<BR /> Are you creating a modular input in a custom app?<BR /> Are you using Application Builder?<BR /> Are you look to create a state table (not what Splunk is meant to do really, but has workarounds like lookups)?<BR /> Can you describe the programmatic workflow differently to provide more context and sample values?</P> Wed, 26 Jun 2019 16:58:50 GMT jnudell_2 2019-06-26T16:58:50Z https://community.splunk.com/t5/Getting-Data-In/How-to-optimize-script-in-Splunk/m-p/447791#M77871 <P>Hi folks, <BR /> Now, I want to poll API with the result shown below. <BR /> The Splunk poll API interval three times respectively, In new polling API, it may have duplicate alert_id with the previous one. I want to save up to date alert_id instead in order to guarantee the Splunk output always store newly information.<BR /> Anyone has ideas and can share? <BR /> <IMG src="https://community.splunk.com/storage/temp/273065-alert-id.png" alt="alt text" /></P> Wed, 30 Sep 2020 01:05:46 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-optimize-script-in-Splunk/m-p/447791#M77871 nguyenhuyhoang0 2020-09-30T01:05:46Z https://community.splunk.com/t5/Getting-Data-In/How-to-optimize-script-in-Splunk/m-p/447792#M77872 <P>You're going to have to provide a lot more detail that what you've described so far.<BR /><BR /> What is the API?<BR /> Are you creating a modular input in a custom app?<BR /> Are you using Application Builder?<BR /> Are you look to create a state table (not what Splunk is meant to do really, but has workarounds like lookups)?<BR /> Can you describe the programmatic workflow differently to provide more context and sample values?</P> Wed, 26 Jun 2019 16:58:50 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-optimize-script-in-Splunk/m-p/447792#M77872 jnudell_2 2019-06-26T16:58:50Z