Default Version 1.7.2
October 29, 2025
October 29, 2025
Splunk Enterprise, Splunk Cloud
Platform Version: 10.5, 10.4, 10.3, 10.2, 10.1, 10.0, 9.4, 9.3, 9.2, 9.1, 9.0
Log in to rate this app
A custom command that adds whois data from WhoisXMLAPI. This add-on provides a custom command that takes the domain from one or more events and uses the WhoisXMLAPI API to populate whois information for each domain. The add-on stores API credentials securely using Splunk's native password storage API, making it suitable for Splunk Cloud deployment.
Log in to report this app listing.