topic How to retrieve session without passing hardcoded credentials in python script in All Apps and Add-ons

How to retrieve session without passing hardcoded credentials in python script

Inayath_khan — Fri, 02 Mar 2018 07:27:08 GMT

i have used,
sessionKey = splunk.auth.getSessionKey(username,password)
credentials = getCredentials(sessionKey)
to get the credentials where i have passed hardcoded crentials in splunk.auth.

but i have to get credentials without passing the hardcoded credentials i have been tried doing

results,dummyresults,settings = splunk.Intersplunk.getOrganizedResults()
session_key = str(settings.get('sessionKey'))

unable to get the session can anybody help me in figuring out the issue.

Re: How to retrieve session without passing hardcoded credentials in python script

starcher — Sun, 04 Mar 2018 15:18:13 GMT

Depending on how you are executing the script. If it's triggered from within Splunk maybe something in here will help you. http://www.georgestarcher.com/splunk-stored-encrypted-credentials/ If it's triggered from within Splunk such as an alert action, input etc you can get the active session key of the user that triggered the action.

Re: How to retrieve session without passing hardcoded credentials in python script

Inayath_khan — Tue, 29 Sep 2020 18:18:10 GMT

Thanks for the reply starcher,

I have executed below python script..

import sys, json
import splunk.Intersplunk
import splunklib.client as client

results,dummyresults,settings = splunk.Intersplunk.getOrganizedResults()

session_key = str(settings.get('sessionKey'))
splunkService = client.connect(token=session_key)
print session_key
~

I have tried this to get the session key ...whether import splunk.Intersplunk works with splunk 7.0.1 version .. I have been tried executing this ..i didn't get output it's getting strucked at the point splunk.Intersplunk.getOrganizedResults(). And iam not using any splunk-python-SDK libraries to do this task.

Could please tell me is any other way of doing it.

Re: How to retrieve session without passing hardcoded credentials in python script

Inayath_khan — Tue, 29 Sep 2020 18:18:55 GMT

I have executed below python script..

import sys, json
import splunk.Intersplunk
import splunklib.client as client

results,dummyresults,settings = splunk.Intersplunk.getOrganizedResults()

session_key = str(settings.get('sessionKey'))
splunkService = client.connect(token=session_key)
print session_key
~

I have tried this to get the session key.

Re: How to retrieve session without passing hardcoded credentials in python script

BernardEAI — Thu, 12 Nov 2020 11:13:49 GMT

I'm also working on getting this right. My script was also getting stuck at splunk.Intersplunk.getOrganizedResults(). The reason was that the search command I was calling the script from was not generating any results, and I believe getOrganizedResults() was waiting for results to be generated.

I fixed this by adding a generating command (GeneratingCommand) into my script before getOrganizedResults().