Developing for Splunk Enterprise
Highlighted

Is it possible to disable certain Data Input Parameters of a Modular Input based on some logic within the Python Script?

Explorer

Hi all,

I have created a modular input using Splunk's Add-on builder (v3.0.1). The modular input is based on a Python script which polls our REST API to ingest data into Splunk. The Modular input takes three Data Input Parameters, a simple text-box, a password and a checkbox.

What I want to do is, based on the data ingested by the script, disable or remove the checkbox input parameter so that user cannot edit it. Does Splunk modular inputs provide any such functionality to perform this?

Any help towards pointing me in the right direction will be highly appreciated.

Regards,
Thanks

Labels (1)
0 Karma
Highlighted

Re: Is it possible to disable certain Data Input Parameters of a Modular Input based on some logic within the Python Scr

SplunkTrust
SplunkTrust

To my knowledge, you would have use REST and POST to the conf-inputs/[stanza] endpoint. I havent done this myself however I would imagine that the change wouldnt take effect until the next time splunk is restarted. You may get away with a restart of splunkd but I wouldnt be able to say for sure

 https://docs.splunk.com/Documentation/Splunk/7.2.6/RESTREF/RESTconf#configs.2Fconf-.7Bfile.7D.2F.7Bn...

0 Karma