All Apps and Add-ons

Configuration Metadata in Config from REST APIs?

StephanPCossett
Engager

Hello All,

Our client would like to be able to annotate their configuration stanzas with metadata about the ingestion (e.g. date of setup, business unit, application ID, person who did configuration, etc.) None of this data will actually used by Splunk, it's just us tagging data into the stanzas. So as an example, I have the following config stanza:

[monitor://C:\GitRepos\service-information-display-svc\logs]
disabled = false
index = localindex
sourcetype = _json
host = LALA_ONE

We'd like to do something like this via the API:

[monitor://C:\GitRepos\service-information-display-svc\logs]
disabled = false
index = localindex
sourcetype = _json
host = LALA_ONE
_createdby = scossette
_dateCreated = 07302018
_appId = 054838
_businessUnit = sales

When trying to add them through the APIs, it comes back as an HTTP 400... most likely because the parameter names are not supported via Splunk. Is this even possible? If so, how?

Thanks in Advance,
Steve

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...