Splunk add-on save checkpoint

[nareshkumarg]

Hi All,

I managed to store and retrieve data using the following python command.

 # save checkpoint
 helper.save_check_point(key, state)
 # delete checkpoint
 helper.delete_check_point(key)
 # get checkpoint
 state = helper.get_check_point(key)

I would like to know where the data is stored and how can I check the value on Splunk.

I was checking under lookup with the name and source given for the add-on I was working on, but could not find it.

Regards,
Naresh

[harsmarvania57 · Accepted solution]

Hi,

Usually checkpoint stored in $SPLUNK_HOME/var/lib/splunk/modinputs/<some_name_provided_by_developer>/ , it looks like you are asking about Palo-Alto add-on.

[nareshkumarg]

I have developed my own add on and I want to check the value to validate the functioning of my python script.

[harsmarvania57]

Have you looked at the path which I have provided? If you can't find it then you need to provide your full python code (Hide sensitive data).

[nareshkumarg]

Thanks a lot @harsmarvania57 I was able to find the value which was stored with base64.