https://community.splunk.com/t5/Splunk-Dev/Script-python-with-search-SPL/m-p/567131#M10078 <P>Yes, it's possible to perform a search in a Python script.&nbsp; See&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/8.2.2/RESTREF/RESTsearch" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.2.2/RESTREF/RESTsearch</A>&nbsp;for the details.</P> Wed, 15 Sep 2021 15:25:26 GMT richgalloway 2021-09-15T15:25:26Z https://community.splunk.com/t5/Splunk-Dev/Script-python-with-search-SPL/m-p/567071#M10077 <P>Hello Splunk team,</P><P>do you know if it's possible to do a splunk search in a python script? taking into account the selection of the desired period (last week, last month ...).</P><P>for example for a simple search :<BR /><BR /></P><P>| append [search sourcetype=ESP_Histo env="Web" service="Application" apps="Web Sharepoints" fn="*" managed_entity="*- URL" sampler="SHAREPOINT - URL" ID_EVENT | eval Applications=case( apps like "%Web Sharepoints%","WEB SHAREPOINTS") | `transactions` ]</P><P>| eval max_time=if(info_max_time == "+Infinity", now(), info_max_time) | eval min_time=if(info_min_time == "0.000", 1577836800, info_min_time) | eval periode1=max_time-min_time<BR />| stats sum(duration) AS durationindispo by Applications, periode1</P><P>| outputcsv append=true override_if_empty=false web_search</P> Wed, 15 Sep 2021 08:17:40 GMT https://community.splunk.com/t5/Splunk-Dev/Script-python-with-search-SPL/m-p/567071#M10077 wcastillocruz 2021-09-15T08:17:40Z https://community.splunk.com/t5/Splunk-Dev/Script-python-with-search-SPL/m-p/567131#M10078 <P>Yes, it's possible to perform a search in a Python script.&nbsp; See&nbsp;<A href="https://docs.splunk.com/Documentation/Splunk/8.2.2/RESTREF/RESTsearch" target="_blank">https://docs.splunk.com/Documentation/Splunk/8.2.2/RESTREF/RESTsearch</A>&nbsp;for the details.</P> Wed, 15 Sep 2021 15:25:26 GMT https://community.splunk.com/t5/Splunk-Dev/Script-python-with-search-SPL/m-p/567131#M10078 richgalloway 2021-09-15T15:25:26Z