All Apps and Add-ons

Custom Response Handler

fara3
Explorer

Hi,

I installed RestApi modular input 1.3.5 and I created a custom handler in responsehandlers.py (that I have configured in the tool afterwards):

class myCustomHandler:
def init(self,**args):
pass
def call(self, response_object,raw_response_output,response_type,req_args,endpoint):

    file = open("/home/fabric/updatePlatform.log", "a")
    file.write(raw_response_output+"\n")
    file.close()

Even if I uninstall the modular input or I restart splunk server, the Rest call is done in the background once and again. Do you know what can be happening?

Tags (1)
0 Karma
1 Solution

fara3
Explorer

After restarting the server, the node seems to be ok.

View solution in original post

fara3
Explorer

After restarting the server, the node seems to be ok.

Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...