All Apps and Add-ons

REST API Modular Input: Is it possible to track keywords with spaces, like url_args?

piis8
Engager

Dumb Question. Setting up a API modular input.

Is it possible to track keywords with spaces.
For example
url_args = track=joeypizza, "joey pizza"^stall_warnings=true

Or would that be more like a regex capture group (joey pizza)
Or url encoding like joey%20pizza

0 Karma

Damien_Dallimor
Ultra Champion

Raw spaces are fine
No url encoding needed
No regex pattern

(Made that answer a haiku for fun)

Get Updates on the Splunk Community!

Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...

WATCH NOWAs AI starts tackling low level alerts, it's more critical than ever to uplevel your threat hunting ...

Splunk APM: New Product Features + Community Office Hours Recap!

Howdy Splunk Community! Over the past few months, we’ve had a lot going on in the world of Splunk Application ...

Index This | Forward, I’m heavy; backward, I’m not. What am I?

April 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...