Splunk Dev

get data in splunk using virustotal data

weicheng98
Path Finder

Hi how do I get data into splunk using virus total data ? Is there a way where I can call the virustotal api key in splunk and then use splunk to fetch the virus total data ?

[edit]

I have already installed a universal forwarder on my ubuntu virtual machine.

0 Karma

deepashri_123
Motivator

Hey @weicheng98,

You can try using this app :
https://splunkbase.splunk.com/app/3606/#/details

Let me know if this helps!!

0 Karma

weicheng98
Path Finder

Hi @deepashri_123,

I have tried the add-on itself but how about if I want to write a python script to get the results from the virus total api, and then use the scripted input to show the results in the Splunk's search and reporting, how would I go about doing that ?

I have taken inspiration from this link but still not sure how his code is able to show its results on splunk.

0 Karma
Get Updates on the Splunk Community!

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...

AppDynamics is now part of Splunk Ideas

Hello Splunkers, We have exciting news for you! AppDynamics has been added to the Splunk Ideas Portal. Which ...

Advanced Splunk Data Management Strategies

Join us on Wednesday, May 14, 2025, at 11 AM PDT / 2 PM EDT for an exclusive Tech Talk that delves into ...