All Apps and Add-ons

Is there a way to save a value (for example to save a last date the API Endpoint was called) in splunk add-on?

EDCIntelli
Explorer

Hi,

I am creating a modular REST API Input for my splunk add-on.

this API endpoint needs a date parameter which the value sent from add-on should be the last time this api endpoint was called by splunk, is there a way to save this value for my add-on?

so any time my splunk add-on calls the endpoint, i need this date to be overwritten and saved in the add-on for the next call.

Thanks a lot !

0 Karma

Damien_Dallimor
Ultra Champion

This app , https://splunkbase.splunk.com/app/1546/ , does what you want.

Plug in a custom response handler (mentioned in the docs) to save the date/time param.

Many examples of custom response handlers in rest_ta/bin/responsehandlers.py to get you started

0 Karma

Damien_Dallimor
Ultra Champion

You have tagged this question with an existing app that performs this functionality out of the box for you already.

0 Karma

EDCIntelli
Explorer

Thanks Damien for your answer, sorry i am not sure i follow. could you please elaborate what you mean?

0 Karma
Get Updates on the Splunk Community!

Routing logs with Splunk OTel Collector for Kubernetes

The Splunk Distribution of the OpenTelemetry (OTel) Collector is a product that provides a way to ingest ...

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...