Splunk Cloud Platform

Is it possible to use KV Store on Splunk Cloud to read and write values?

pgadzhev
Engager

I am trying to build a modular data input using the Splunk Add-on Builder and the input should be statefull - it should keep track of its progress.

The Splunk Add-on Builder supports such checks and they're called checkpoints. When reading the documentation it is stated that this technique employs KV Store.

However, the Splunk Cloud documentation itself states that the KV Store REST API endpoints cannot be used, which means that any script using the Splunk SDK would not be able to operate with the KV Store collections.

Am i wrong with interpreting the documentation and thinking that KV Store CRUD operations (using the REST API) are not allowed on Splunk Cloud?

If KV Store is not an option to persist state on Splunk Cloud, is there an any other way to do it?

Thanks!

SteveM-905
Loves-to-Learn

Still wondering here?

0 Karma

bowesmana
SplunkTrust
SplunkTrust

Did you resolve this? We have a similar issue with KV store and REST API.

0 Karma

marcoscala
Builder
 
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

🍂 Fall into November with a fresh lineup of Community Office Hours, Tech Talks, and Webinars we’ve ...

Transform your security operations with Splunk Enterprise Security

Hi Splunk Community, Splunk Platform has set a great foundation for your security operations. With the ...

Splunk Admins and App Developers | Earn a $35 gift card!

Splunk, in collaboration with ESG (Enterprise Strategy Group) by TechTarget, is excited to announce a ...