Splunk Apps » Website Input

Some options for the inputs.conf:

1. output_results = (all | matches_changed | content_changed)
2. include_only_changed = (0 | 1) along with change_policy = (all | matches_changed | content_changed)

https://lukemurphey.net/projects/splunk-web-input/wiki/Adding_parameters

StaticListField("output_results", "Indicates when results output should be created", "Output the matches when content changes", none_allowed=True, empty_allowed=True, required_on_create=False, required_on_edit=False, valid_values=['always', 'when_matches_change', 'when_contents_change'])

• Produce a hash on each result (in run())

Issues: * How does this work with spidering? * How does this work when the input fails due to something like a network outage?

Need:

• Default value on the inputs page
• Loading of existing value on manager XML page