All Apps and Add-ons

REST Incrementing Start & End

richardphung
Communicator

This may be trivial...

I have a REST API URL:

...api.thiswebsite.com/client/v4/xxxxxxxxxxxxxxx/logs?start=(date-time-format)&end=(date-time-format)

The date-time-format they are requesting is RFC-3339 format:
e.g.
2020-01-29T17:00:21Z

The json that is returned looks like this:

{"ClientIP":"XXX.XXX.XXX","EndTimestamp":"2020-01-29T17:18:47Z","ResponseBytes":11627,"ResponseStatus":200,"StartTimestamp":"2020-01-29T17:18:47Z""}

Ideally, the start and end times would increment...
But I am unsure how to do this with the Add-On builder.

https://docs.splunk.com/Documentation/AddonBuilder/3.0.1/UserGuide/ConfigureDataCollection
https://docs.splunk.com/Documentation/AddonBuilder/3.0.1/UserGuide/ConfigureDataCollection#Use_check...

  • Checkpoint parameter name
  • Checkpoint field path
  • Checkpoint initial value

Please advise.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...