All Apps and Add-ons

Is there a way to save a value (for example to save a last date the API Endpoint was called) in splunk add-on?

EDCIntelli
Explorer

Hi,

I am creating a modular REST API Input for my splunk add-on.

this API endpoint needs a date parameter which the value sent from add-on should be the last time this api endpoint was called by splunk, is there a way to save this value for my add-on?

so any time my splunk add-on calls the endpoint, i need this date to be overwritten and saved in the add-on for the next call.

Thanks a lot !

0 Karma

Damien_Dallimor
Ultra Champion

This app , https://splunkbase.splunk.com/app/1546/ , does what you want.

Plug in a custom response handler (mentioned in the docs) to save the date/time param.

Many examples of custom response handlers in rest_ta/bin/responsehandlers.py to get you started

0 Karma

Damien_Dallimor
Ultra Champion

You have tagged this question with an existing app that performs this functionality out of the box for you already.

0 Karma

EDCIntelli
Explorer

Thanks Damien for your answer, sorry i am not sure i follow. could you please elaborate what you mean?

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...