topic Re: Splunk add-on save checkpoint in Getting Data In

Splunk add-on save checkpoint

nareshkumarg — Sun, 29 Mar 2020 16:03:36 GMT

Hi All,

I managed to store and retrieve data using the following python command.

 # save checkpoint
 helper.save_check_point(key, state)
 # delete checkpoint
 helper.delete_check_point(key)
 # get checkpoint
 state = helper.get_check_point(key)

I would like to know where the data is stored and how can I check the value on Splunk.

I was checking under lookup with the name and source given for the add-on I was working on, but could not find it.

Regards,
Naresh

Re: Splunk add-on save checkpoint

harsmarvania57 — Mon, 30 Mar 2020 12:34:02 GMT

Hi,

Usually checkpoint stored in $SPLUNK_HOME/var/lib/splunk/modinputs/<some_name_provided_by_developer>/ , it looks like you are asking about Palo-Alto add-on.

Re: Splunk add-on save checkpoint

nareshkumarg — Mon, 30 Mar 2020 13:50:17 GMT

I have developed my own add on and I want to check the value to validate the functioning of my python script.

Re: Splunk add-on save checkpoint

harsmarvania57 — Mon, 30 Mar 2020 15:27:02 GMT

Have you looked at the path which I have provided? If you can't find it then you need to provide your full python code (Hide sensitive data).

Re: Splunk add-on save checkpoint

nareshkumarg — Mon, 30 Mar 2020 18:13:41 GMT

Thanks a lot @harsmarvania57 I was able to find the value which was stored with base64.