All Apps and Add-ons

Is there a way to save a value (for example to save a last date the API Endpoint was called) in splunk add-on?

EDCIntelli
Explorer

Hi,

I am creating a modular REST API Input for my splunk add-on.

this API endpoint needs a date parameter which the value sent from add-on should be the last time this api endpoint was called by splunk, is there a way to save this value for my add-on?

so any time my splunk add-on calls the endpoint, i need this date to be overwritten and saved in the add-on for the next call.

Thanks a lot !

0 Karma

Damien_Dallimor
Ultra Champion

This app , https://splunkbase.splunk.com/app/1546/ , does what you want.

Plug in a custom response handler (mentioned in the docs) to save the date/time param.

Many examples of custom response handlers in rest_ta/bin/responsehandlers.py to get you started

0 Karma

Damien_Dallimor
Ultra Champion

You have tagged this question with an existing app that performs this functionality out of the box for you already.

0 Karma

EDCIntelli
Explorer

Thanks Damien for your answer, sorry i am not sure i follow. could you please elaborate what you mean?

0 Karma
Get Updates on the Splunk Community!

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...

Security Newsletter Updates | March 2023

 March 2023 | Check out the latest and greatestUnify Your Security Operations with Splunk Mission Control The ...