Getting Data In

How to optimize script in Splunk

nguyenhuyhoang0
New Member

Hi folks,
Now, I want to poll API with the result shown below.
The Splunk poll API interval three times respectively, In new polling API, it may have duplicate alert_id with the previous one. I want to save up to date alert_id instead in order to guarantee the Splunk output always store newly information.
Anyone has ideas and can share?
alt text

0 Karma

jnudell_2
Builder

You're going to have to provide a lot more detail that what you've described so far.

What is the API?
Are you creating a modular input in a custom app?
Are you using Application Builder?
Are you look to create a state table (not what Splunk is meant to do really, but has workarounds like lookups)?
Can you describe the programmatic workflow differently to provide more context and sample values?

0 Karma
Get Updates on the Splunk Community!

Mastering Data Pipelines: Unlocking Value with Splunk

 In today's AI-driven world, organizations must balance the challenges of managing the explosion of data with ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...

AI Adoption Hub Launch | Curated Resources to Get Started with AI in Splunk

Hey Splunk Practitioners and AI Enthusiasts! It’s no secret (or surprise) that AI is at the forefront of ...