Website Contacts API Splunk application tutorial

Whois XML Website Contacts API is an application for Splunk. It lets you obtain website contact information within Splunk.

The local installation of the "Website Contacts API Splunk application" add-on for the Splunk application must be done with the "admin" username and the "admin" role.

Prerequisites

You need to have Splunk Enterprise installed and configured. To do so, please refer to the official documentation.

Configuring the extension

1. Log in to Splunk.

2. Download and install the application. This can be done from within Splunk. (https://splunkbase.splunk.com/app/5344)

3. You can start configuring immediately once the application is installed.

3.1 You can also configure the application on the Apps page. Click on Set up next to the application name.

4. Fill in your API key and click on Save.

Using the extension

1. On the Website Contacts lookup page you can perform lookups.

2. To integrate Website Contacts lookup into your script you can use the command wxawebsitecontacts. It takes 3 arguments: search_term, where you provide a domain name, api_key (optional), where you can provide your API key, otherwise it will be taken from a config file, and from_scratch (optional) which can be equal to 0 for getting the cached contacts information if there is one, or 1 for demanding the website contacts information from scratch. The command response includes the following fields: domain_name, company_names, country_code, emails_description, emails_address, meta_description, meta_title, phones_call_hours, phones_description, phones_number, postal_addresses, social_links_facebook, social_links_instagram, social_links_linkedIn, social_links_twitter, website_responded. Please note that some fields can contain arrays.