- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

tamduong16
Contributor
09-15-2017
10:07 AM
I want to set up a REST API call to https get request but this site will return a zip file instead of xml, jason , or text. Is there a way I could set it to index the zip file? If not, is there any workaround? This is the description from the site:
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Damien_Dallimor
Ultra Champion
09-15-2017
12:48 PM
You can try using a custom response handler that will unzip the file for you.
- Create a custom handler in $SPLUNK_HOME/etc/apps/rest_ta/bin/responsehandlers.py
- Declare the handler in your configuration
Psuedo code examples :
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

lfedak_splunk

Splunk Employee
09-18-2017
10:41 AM
Hey @tamduong16, if @damien solved your problem, please close the question and award karma points by accepting the answer. 🙂 Happy Splunking!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

Damien_Dallimor
Ultra Champion
09-15-2017
12:48 PM
You can try using a custom response handler that will unzip the file for you.
- Create a custom handler in $SPLUNK_HOME/etc/apps/rest_ta/bin/responsehandlers.py
- Declare the handler in your configuration
Psuedo code examples :
