Splunk Dev

Monitoring App

jet
Explorer

I have a published app on SplunkBase which is designed to pull event data via API from an App which I publish to Splunk with. It's been working fine for several years.

A recent request from users is for more realtime data which would require me to pull data from API. It's not really suitable for logging and where I have done this before on an iPhone app, I held in ram as opposed to being "logged".

Ideally I would want to pull data once and for the response to be shared across multiple users as opposed to many users each individually polling data.

Is this something that is possible with a Splunk app? 

Labels (5)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The app can pull the data once (or periodically) and store it in a lookup.  Then it's available to users from the lookup.

---
If this reply helps you, Karma would be appreciated.

jet
Explorer

That helps! Upvote for you.

0 Karma
Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...