All Apps and Add-ons

REST API Modular Input: HTTP Response Status Codes

bimord
Path Finder

Hi @Damien Dallimore
My question is similar to this one : https://answers.splunk.com/answers/186128 but I need a bit more guidance please (and am on Splunk 7.3.0)

I have a REST endpoint that returns json but I require the http status codes to compare the json response to.
I know that is achieved with a custom response handler and i know how to select the custom handler in the UI but I don't know how to python 😞

Please help me

0 Karma

smuderasi
Explorer

Thanks @PrewinThomas , Do you have sample custom response handler which outputs both status code and body.

0 Karma

smuderasi
Explorer

Facing same issue, Was this resolved?

0 Karma

PrewinThomas
Builder

@smuderasi 

Splunk’s REST Modular Input allows you to ingest data from REST APIs. By default, only the response body (e.g., JSON) is indexed. To also capture the HTTP status code, you need a custom response handler—a Python class that processes the HTTP response and outputs both the status code and the body.

0 Karma
Get Updates on the Splunk Community!

Leveraging Detections from the Splunk Threat Research Team & Cisco Talos

  Now On Demand  Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...