Creating new columns with external data from an API

[meital]

Hey guys!

This is my first question here, so I'm sorry if I'm not being clear.

I want to enrich the data we have and add a few fields with data that I receive from an external API.

For this, I want to create a custom command to receive a field name and add run a python code to send requests to the API with the field values and create new fields with the additional data for each row.

I have no experience with creating new commands with python, so I'd much appreciate an explanation how to do it (or if you have a better idea how to implement this) and some examples to rely on.

Thanks! 🙂

[PickleRick]

There's quite a lot of docs about this.

https://dev.splunk.com/enterprise/docs/devtools/customsearchcommands/