When you add a parameter thru UI, AoB will do following things for you: Add the parameter definition in /README/inputs.conf.spec Add the default value in /default/inputs.conf Add the parameter in custom REST endpoint to operate this value thru Splunk REST API Update Addon UI Update AoB internal metadata If we want to add one parameter without AoB, please follow Splunk doc to create modular input manually. If we still want to use AoB to read/write this parameter in Python code, please do #1,2,3 manually. But basically this hack approach is not officially supported by AoB. We can try it but not guaranteed it's gonna work. Personal speaking, add this optional parameter via AoB UI with a default value is not harmful. If you really want to hide it from Addon UI, you can try to add it first, and then update Addon frontend code to remove it. That could be an easier approach.
... View more