All Apps and Add-ons

Is there a way to save a value (for example to save a last date the API Endpoint was called) in splunk add-on?

EDCIntelli
Explorer

Hi,

I am creating a modular REST API Input for my splunk add-on.

this API endpoint needs a date parameter which the value sent from add-on should be the last time this api endpoint was called by splunk, is there a way to save this value for my add-on?

so any time my splunk add-on calls the endpoint, i need this date to be overwritten and saved in the add-on for the next call.

Thanks a lot !

0 Karma

Damien_Dallimor
Ultra Champion

This app , https://splunkbase.splunk.com/app/1546/ , does what you want.

Plug in a custom response handler (mentioned in the docs) to save the date/time param.

Many examples of custom response handlers in rest_ta/bin/responsehandlers.py to get you started

0 Karma

Damien_Dallimor
Ultra Champion

You have tagged this question with an existing app that performs this functionality out of the box for you already.

0 Karma

EDCIntelli
Explorer

Thanks Damien for your answer, sorry i am not sure i follow. could you please elaborate what you mean?

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...