HTTP Post Loops (Modern editor)

samimbarek — Fri, 29 Oct 2021 13:45:56 GMT

Hello,

I have a fairly short question.

In the classic editor this worked just fine but in the modern one it simply does not loop the calls.

Scenario:

I have a list of artefacts I want to use in an HTTP Post.

First I am creating my format, something like

%% {{ "object": "{0}" }} %%

I will latest access this format in the Splunk HTTP Apps "post data" action.

Problem:

When accessing the format as the body using myformat.* I am expecting it to loop for each artefact the format was created for.

What ends up happening is a single request with multiple { "object": "ip1" }, { "object": "ip2" }, etc..

Is there a new way looping is handled in the modern editor?

topic HTTP Post Loops (Modern editor) in Splunk SOAR