All Apps and Add-ons

REST API Modular Input: HTTP Response Status Codes

bimord
Path Finder

Hi @Damien Dallimore
My question is similar to this one : https://answers.splunk.com/answers/186128 but I need a bit more guidance please (and am on Splunk 7.3.0)

I have a REST endpoint that returns json but I require the http status codes to compare the json response to.
I know that is achieved with a custom response handler and i know how to select the custom handler in the UI but I don't know how to python 😞

Please help me

0 Karma

smuderasi
Explorer

Thanks @Prewin27 , Do you have sample custom response handler which outputs both status code and body.

0 Karma

smuderasi
Explorer

Facing same issue, Was this resolved?

0 Karma

Prewin27
Communicator

@smuderasi 

Splunk’s REST Modular Input allows you to ingest data from REST APIs. By default, only the response body (e.g., JSON) is indexed. To also capture the HTTP status code, you need a custom response handler—a Python class that processes the HTTP response and outputs both the status code and the body.

0 Karma
Get Updates on the Splunk Community!

Demo Day: Strengthen Your SOC with Splunk Enterprise Security 8.1

Today’s threat landscape is more complex than ever. Security operation centers (SOCs) are overwhelmed with ...

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...