Splunk Dev

Is it possible to disable certain Data Input Parameters of a Modular Input based on some logic within the Python Script?

umairahmad3985
Path Finder

Hi all,

I have created a modular input using Splunk's Add-on builder (v3.0.1). The modular input is based on a Python script which polls our REST API to ingest data into Splunk. The Modular input takes three Data Input Parameters, a simple text-box, a password and a checkbox.

What I want to do is, based on the data ingested by the script, disable or remove the checkbox input parameter so that user cannot edit it. Does Splunk modular inputs provide any such functionality to perform this?

Any help towards pointing me in the right direction will be highly appreciated.

Regards,
Thanks

Labels (1)
0 Karma

twesty
Path Finder

To my knowledge, you would have use REST and POST to the conf-inputs/[stanza] endpoint. I havent done this myself however I would imagine that the change wouldnt take effect until the next time splunk is restarted. You may get away with a restart of splunkd but I wouldnt be able to say for sure

 https://docs.splunk.com/Documentation/Splunk/7.2.6/RESTREF/RESTconf#configs.2Fconf-.7Bfile.7D.2F.7Bn...

0 Karma
Get Updates on the Splunk Community!

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...

From Alert to Resolution: How Splunk Observability Helps SREs Navigate Critical ...

It's 3:17 AM, and your phone buzzes with an urgent alert. Wire transfer processing times have spiked, and ...