About Script Lookup Plug-Ins

You can write one or more Script Lookup Plug-ins to query data repositories for attribute values. For example, you can write a script that queries a DNS server for information about a sender that is involved in an incident. A Script Lookup Plug-In can use the output from such scripts to populate custom attributes in incident records.
Unlike the CSV or LDAP Lookup Plug-ins, the Script Lookup Plug-In does not use in-line attribute maps to specify how to look up parameter keys. Instead, you write this functionality into each script as needed.
To implement a Script Lookup Plug-In , you can use any scripting language that reads standard input (
stdin
) and writes standard output (
stdout
). The examples in the user interface and in this documentation use Python version 2.6.