This tool has an embeded documentation located after installation in
The syntax of a URL is as follow:
For more information, please refer to the embeded documentation.
A generic lookup call in Splunk is of the format:
... | lookup <lookup_name> field AS field
... | lookup ut_parse_simple_lookup url AS cs_uri
UTBox also provides macros definition for each lookup to make it easier to call the lookups. In the previous example, the call would be:
... | `ut_parse_simple(cs_uri)`
It is important to understand that those macros are simply shortcuts to lookups call. One can use one or another depending on their tastes.
Update for python3. Also includes updated mozilla suffix list.
Community Supported App
Splunk AppInspect evaluates Splunk apps against a set of Splunk-defined criteria to assess the validity and security of an app package and components.
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps and add-ons from Splunk, our partners and our community. Find an app or add-on for most any data source and user need, or simply create your own with help from our developer portal.