pmeyerson

#!/usr/bin/python

import datetime
import requests
import csv
import json

url = 'https://infobloxhostname-or-ip/wapi/v2.0/'     # API URL to query.  Make sure API access is enabled on this host.
id = ''                                               # API enabled credentials.
pwd = ''  

pmeyerson

#!/usr/bin/python
# requires dnspython compliments dnspython.org; install via pip
import glob
import os
import difflib
import datetime
import dns.query
import dns.zone
import dns.tsigkeyring

pmeyerson

#!/usr/bin/python
# Fill in your apikey and apipwd and hostname of machine to get started.  
# Determine the hostguid from the amp console.  Advanced users could use another api query to retreive this.
# This script is rough but should get you started.

import json
import requests
import csv
import datetime

pmeyerson

#!/usr/bin/python
import os
import csv
import sys


logdir="exhub_logs/"
outdir="output/"

# get list of input log files

pmeyerson

# make sure you enter correct info for 
# auth_password, auth_user, endpoint, index.  Sourcetype and polling interval as you like.
# Examples are below.  Inteded for use with REST API modular input add-on see https://splunkbase.splunk.com/app/1546/
# Consider using Splunk's Add-on-Builder app (available on splunkbase) as app 1546 requires $ now I believe.

[rest://infoblox-networks]
auth_password = password
auth_type = basic
auth_user = user
endpoint = https://infoblox_ip/wapi/v2.0/network

pmeyerson

index=ddi sourcetype="infoblox:api:networks" 
| dedup network 
| rex field=comment "(?<Site>[\s\S^-]*)\s-\s(?<Vlan>[0-9xX]*)\s-\s(?<NetworkDescription>[\s\S]*)" 
| rename network as Network
| table Network Site NetworkDescription Vlan 
| sort Network num 
| outputlookup networks createinapp=true append=false

pmeyerson

class CustomHandler:
# response from API is in format {"result": [{}, {}, {}]} at least for cmdb tables
# credit http://www.georgestarcher.com/splunk-null-thinking/
  
   def __init__(self,**args):
        pass

   def __call__(self, response_object, raw_response_output,response_type,req_args,endpoint):
        #if response_type == "json":
        output = json.loads(raw_response_output)

pmeyerson

#!/bin/usr/python3
import time
import random
import string
import sys
from splunk_http_event_collector import http_event_collector

# splunk_http_event_collector available from https://pypi.org/project/Splunk-HEC/