How to sync up update in REST API Modular Input

[mnaim]

I'm using the REST API Modular Input app to get data from an API and index it on splunk. In my case, I'm using google api to run searches and I'm indexing the results. The problem is that I need to change the parameters of my search several times a day (via script executed via a cron). I'm a splunk noob, so the only way I got the gui to sync up with the inputs.config file is by restarting splunk. How can I get the gui side update and sync up with the backend without restarting? Thank you.

[Damien_Dallimor · Accepted solution]

The REST API Mod Input has the ability to dynamically change and persist config parameters ie : URL arguments, headers , post body, cookies etc... You should not be using a third party cron triggered script.

You'd do this with a custom response handler in bin/responsehandlers.py

Look at the example TwitterEventHandler in the shipped release for an example of such processing behavior.

[mnaim]

My url_params changes a lot more than all the examples I've see so far, but may just need a little creative scripting. Thank you.