Splunk Search

Lookup Script - REST API Calls from result set

lpolo
Motivator

I have the following result set:

seed
rovi$7389938
rovi$18133562
rovi$12759261

From this result set I need to make a REST API call for each row of the result set.

REST API Call:

http://rovi.com:8080/rex/select/?q=ids:seed&version=2.2&start=0&rows=10&indent=on&fl=title

For this result set example I have 3 REST API calls:

http://rovi.com:8080/rex/select/?q=ids:rovi$7389938&version=2.2&start=0&rows=10&indent=on&fl=title
http://rovi:8080/rex/select/?q=ids:rovi$18133562&version=2.2&start=0&rows=10&indent=on&fl=title
http://rovi:8080/rex/select/?q=ids:rovi$12759261&version=2.2&start=0&rows=10&indent=on&fl=title

So, the final result will be:

title seed
Parking Wars rovi$7389938
Staunton Hill rovi$18133562
Deadline rovi$12759261

Is there any particular document that I can read so I can integrate my script in Splunk?

Regards,
Lp

Tags (1)
0 Karma

lpolo
Motivator
0 Karma

lpolo
Motivator

It partially solve my problem. I had to use a script look up.

0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...