Building for the Splunk Platform

Is it possible to disable certain Data Input Parameters of a Modular Input based on some logic within the Python Script?

Path Finder

Hi all,

I have created a modular input using Splunk's Add-on builder (v3.0.1). The modular input is based on a Python script which polls our REST API to ingest data into Splunk. The Modular input takes three Data Input Parameters, a simple text-box, a password and a checkbox.

What I want to do is, based on the data ingested by the script, disable or remove the checkbox input parameter so that user cannot edit it. Does Splunk modular inputs provide any such functionality to perform this?

Any help towards pointing me in the right direction will be highly appreciated.


Labels (1)
0 Karma

Path Finder

To my knowledge, you would have use REST and POST to the conf-inputs/[stanza] endpoint. I havent done this myself however I would imagine that the change wouldnt take effect until the next time splunk is restarted. You may get away with a restart of splunkd but I wouldnt be able to say for sure

0 Karma
Get Updates on the Splunk Community!

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...

Ready, Set, SOAR: How Utility Apps Can Up Level Your Playbooks!

 WATCH NOW Powering your capabilities has never been so easy with ready-made Splunk® SOAR Utility Apps. Parse ...

DevSecOps: Why You Should Care and How To Get Started

 WATCH NOW In this Tech Talk we will talk about what people mean by DevSecOps and deep dive into the different ...