splunk-security_content/playbooks/custom_functions/url_parse.json

{
    "create_time": "2021-02-02T15:10:10.119581+00:00",
    "custom_function_id": "afbe8e52b8fbd17c6282cfd1165242298655c038",
    "description": "Separate a URL into its components using urlparse() from the urllib module of Python 3.",
    "draft_mode": false,
    "inputs": [
        {
            "contains_type": [
                "url"
            ],
            "description": "The URL to parse",
            "input_type": "item",
            "name": "input_url",
            "placeholder": "artifact:*.cef.requestUrl"
        }
    ],
    "outputs": [
        {
            "contains_type": [],
            "data_path": "scheme",
            "description": "The scheme of the URL, such as HTTP, HTTPS, or FTP."
        },
        {
            "contains_type": [
                "domain"
            ],
            "data_path": "netloc",
            "description": "The network location of the URL, which is typically the hostname."
        },
        {
            "contains_type": [],
            "data_path": "path",
            "description": "The path to the resource after the first slash in the URL, such as \"en_us/software/splunk-security-orchestration-and-automation.html\"."
        },
        {
            "contains_type": [],
            "data_path": "params",
            "description": "The parameters in the URL after the semicolon."
        },
        {
            "contains_type": [],
            "data_path": "query",
            "description": "The query string of the URL after the question mark. Multiple parameters are not separated from each other."
        },
        {
            "contains_type": [],
            "data_path": "fragment",
            "description": "The subcomponent of the resource which is identified after the hash sign."
        },
        {
            "contains_type": [
                "url"
            ],
            "data_path": "output_url",
            "description": "Passthrough of the original url"
        }
    ],
    "platform_version": "4.10.0.40961",
    "python_version": "3"
}