All Apps and Add-ons

TA-infoblox: Is there a github repo for pull requests?

jamesarmitage
Path Finder

Is there a github repo for this project?

Specifically, I'd like to submit a pull request for infobloxws.py:

Change line 6: remove the json library from import, replace with ast

Change line 154: results=ast.literal_eval(pagehandle.read())

These changes return properly-encoded JSON to the search results for nested extensible attributes. This change let me use SPATH commands to further process the extattrs into extracted fields for some of my queries.

Thanks!

0 Karma

dominiquevocat
SplunkTrust
SplunkTrust

Um, i don't really have much trouble with using spath? The ones i need to work on if i recall correctly are the Extended Attributes. What exactly do you need? I might have to check if i pushed the current version with the sample dashboards and lookups etc.

update: After reviewing i saw that i added a macro to split those fields like the EA:

eval $field$=replace($field$,"u\'","\"") | eval $field$=replace($field$,"\'","\"") | spath input=$field$ | fields - $field$ *.inheritance_source._ref| rename *.value AS *
0 Karma

jkat54
SplunkTrust
SplunkTrust

You can hunt down the author of the app and ask him/her. You'll find public profiles on linkedin and g+.

Dominique Vocat

These people get hounded for support all the time. You should probably just make your own github using the source code the author provided, then fork it to your own and never look back.

0 Karma

jamesarmitage
Path Finder

Thanks. I thought forking the code would probably be the easiest thing to do, but I'd like to add improvements back into this TA so other people can benefit.

0 Karma

dominiquevocat
SplunkTrust
SplunkTrust

Hi, i am quite open for modifications 🙂 and yeah sorry there is currently no github repo.
Feel free to contact me though. I think my email is on my profile and visible. Anyway it is curious dot sle at gmail.com for my private email...

0 Karma
Get Updates on the Splunk Community!

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...