All Apps and Add-ons
Highlighted

REST API Modular Input: Dynamic custom URL arguments

Engager

I am using the QualysGuard API v1 call for the user action log. The REST API call requires a datefrom parameter to scope the data. I would like to make this call every 5 minutes, and have the datefrom parameter be equal to (current time - 5 minutes).

Would it be possible to have this type of dynamic customer url argument?

Thank you.

Highlighted

Re: REST API Modular Input: Dynamic custom URL arguments

Ultra Champion

You can plug in your own custom response handler to accomplish this.I have done this for many other REST endpoints.
Check out the docs, and look at rest_ta/bin/responsehandlers.py
If you get stuck, email me at ddallimore@splunk.com