Splunk Search
Highlighted

How can I update tags and corresponding permissions from a lookup table via Search Processing Language?

Builder

Hi, I have a list of hosts which are maintained and updated via a lookup table. Is it possible in Search Processing Language (SPL) to update tags and their permissions with the latest version of the lookup table? Isn't there a way to do REST calls in SPL?

0 Karma
Highlighted

Re: How can I update tags and corresponding permissions from a lookup table via Search Processing Language?

Esteemed Legend

Everything should be possible if you find the right endpoint. Start with this:

| rest/servicesNS/-/-/configs/conf-tags
0 Karma