Building for the Splunk Platform

Beginner API call with python


Hi Splunk Community,


I have a list of IP that returned from a search, and would like to parse line by line and do a POST api call to third party and display it on the dashboard in realtime.  Im including IP in the POST API and receiving reputation of the IP back.


I read the splunk doc but was confused with saved search, sid and etcs.  Can anyone please help me elaborate the steps i need to take to make it happened?  I have knowledge in Python and Bash


Example of my API call.

curl -X POST "httpx:// "Token: 12ab3a1d81124cc323249c7d1c723e39 -i ""


Thank you.  Im new to Splunk development, please be kind 🙂


Labels (3)
0 Karma
Get Updates on the Splunk Community!

Data Preparation Made Easy: SPL2 for Edge Processor

By now, you may have heard the exciting news that Edge Processor, the easy-to-use Splunk data preparation tool ...

Introducing Edge Processor: Next Gen Data Transformation

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...

Tips & Tricks When Using Ingest Actions

Tune in to learn about:Large scale architecture when using Ingest ActionsRegEx performance considerations ...