# This work contains trade #secrets and confidential material of Splunk Inc., and its use or disclosure in #whole or in part without the express written permission of Splunk Inc. is prohibited. import os import logging as logger import splunk.clilib.cli_common as comm import splunk.clilib.input_tail as input_tail import splunk.clilib.bundle_paths as bundle_paths import splunk.appserver.Template as Template import splunk.appserver.html as html import splunk.appserver.SearchService as SearchService # if field is required, set default value to None knownFields = {'source':None, 'index':'', 'sourcetype':''} # i.e. http://localhost:8000/v3/custom/addtail.add?... def add(requestObject): # set output as html requestObject.setHeader('content-type', 'text/html') vals = {} message = "" try: # set field values, including default vals for field,defaultval in knownFields.items(): if field in requestObject.args: vals[field] = requestObject.args[field][0].strip() elif defaultval == None: message = "