Currently the splunklib that comes with the Splunk Add-on Builder has a function to pull the index helper.get_output_index. Right now I don't see a similar function for getting the host entry. It does look possible when creating the event to override Host but not useful unless it is possible to pull the value.
Calling helper.get_arg('Host') doesn't seem to work.
Currently the splunklib that comes with the Splunk Add-on Builder has a function to pull the index
helper.get_output_index
. Right now I don't see a similar function for getting the host entry. It does look possible when creating the event to override Host but not useful unless it is possible to pull the value.Calling
helper.get_arg('Host')
doesn't seem to work.