Load Data from REST with JSON payload

[lukas_loder]

Hi everybody

I'm trying to get data from the Zabbix API into Splunk. For this I need to be able to send some parameters in JSON format to the API. For example:

{
    "jsonrpc": "2.0",
    "method": "host.get",
    "params": {
        "output": ["hostid"],
        "selectParentTemplates": [
            "templateid",
            "name"
        ],
        "hostids": "10084",
        "user":"username",
        "password":"password"
    },
    "id": 1,
    "auth": "asdf"
}

With the Add-On Builder I'm only able to add simple parameters but not JSON.
Is there any other possibility?

Thanks and kind regards,
Lukas

[asieira · Accepted solution]

You write Python code to perform the API access and submit JSON or any other kind of data this way. You can find more details at https://docs.splunk.com/Documentation/AddonBuilder/2.2.0/UserGuide/ConfigureDataCollectionAdvanced and https://docs.splunk.com/Documentation/AddonBuilder/2.2.0/UserGuide/PythonHelperFunctions.