Hey guys!
This is my first question here, so I'm sorry if I'm not being clear.
I want to enrich the data we have and add a few fields with data that I receive from an external API.
For this, I want to create a custom command to receive a field name and add run a python code to send requests to the API with the field values and create new fields with the additional data for each row.
I have no experience with creating new commands with python, so I'd much appreciate an explanation how to do it (or if you have a better idea how to implement this) and some examples to rely on.
Thanks! 🙂
There's quite a lot of docs about this.
https://dev.splunk.com/enterprise/docs/devtools/customsearchcommands/