All Apps and Add-ons

VT4Splunk Comments

Oleskii
New Member

I have used VT4Splunk app for notable enriching process in Splunk Enterprise Security.

Does somebody know if  I can get comment values from VirusTotal <hash,ip, domain> results? Not only count of them.

Below is an example of 

 

 

| makeresutls
| eval file_hash="43dbf0a7df3b78cffbe5732b9da758fddfe13a8c9775da1214622837e8d30d28"
| vt4splunk hash=file_hash

 

 

the results

Oleskii_0-1703745141649.jpeg

 

Here is an example of a particular API request I found in the VT docs and want to use with splunk: https://docs.virustotal.com/reference/files-comments-get

Thanks in advance!

Labels (1)
Tags (3)
0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...