API & Integration

Reply
Highlighted

splunk - import IPAM networks for lookup

pmeyerson
Techie
Posts: 11
5442     2

https://gist.github.com/pmeyerson/d68361c8258378c29e7848997c42af4e

 

Might be a bit cludgy because I am still learning python and shell scripting.
Biggest gotchas were to enable API access on the infoblox user's group settings, and make sure the lookup permissions were global on the splunk side.

HTH

Re: splunk - import IPAM networks for lookup

Moderator BRampling
Moderator
Posts: 69
5443     2

Thanks for this, nice work!

Re: splunk - import IPAM networks for lookup

pmeyerson
Techie
Posts: 11
5443     2

I would now reccomend using the Splunk add-on https://splunkbase.splunk.com/app/1546/ (rest_ta).  You can then run a saved search to take the latest results and | outputlookup to update your lookup with latest data.

I ended up using response handler: JSONArrayHandler
If you want to specify arguments that are multi-value, be sure to change the delimiter to ":"

Re: splunk - import IPAM networks for lookup

JS
Techie
Posts: 7
5443     2

We have splunk here as well. Not sure what this really does. Can you give an example please? Great work on the code.

Re: splunk - import IPAM networks for lookup

pmeyerson
Techie
Posts: 11
5443     2

JS,

I get a csv/splunk lookup like this:
192.168.1.0\24, DataCenter1, servers
192.168.50.0\24, SiteC, workstations
192.168.55.0\26, SiteD, Guest Wifi
etc...
or whatever data you decide to put in the description field in infoblox for your networks.

For working with splunk I would look at the modular input app to eliminate the need for the python code. You can then use a scheduled search and | outputlookup to save as a lookup csv.

HTH

Re: splunk - import IPAM networks for lookup

Emmasmitha
Techie
Posts: 1
5443     2

Thank you so much for this. I was into this issue and tired to tinker around to check if its possible but couldnt get it done. Now that i have seen the way you did it, thanks guys
with
regards

Showing results for 
Search instead for 
Do you mean 

Recommended for You

Infoblox ActiveTrust and a Deeper Dive Into your DNS Security