topic Re: How to generate logs from a custom Python script? in Splunk Dev

How to generate logs from a custom Python script?

mrrci — Thu, 28 Apr 2022 22:13:28 GMT

Hey there Splunk community. I'm new here and I would appreciate some help if it is possible.

So, I have to create a Splunk app that runs a Python script each day and it should generate random log events and index them into Splunk.

I'm not sure what's the best approach for this. I already wrote a custom script and successfully tested it by implementing it in Splunk (Data Inputs > Scripts...) but I don't know how to run it once a day and get x amount of log events.

I did use Cron schedule for scheduling it once a day but I only get one log event. Is there a way Splunk can run a script x amount of times at once?

Thank you!

Re: How to generate logs from a custom Python script?

Azeemering — Mon, 25 Apr 2022 16:46:12 GMT

Without going into a lot of other settings that you need to apply you can run a rudimentary inputs

Create a splunk app with a structure like this

yoursplunkapp\bin\yourpythonscripthere.py

yoursplunkapp\local\inputs.conf

[script://$SPLUNK_HOME/etc/apps/yoursplunkapp/bin/yourpythonscripthere.py]
interval = 30
index=foo
sourcetype=faa

This will run your script every 30 seconds. You can use seconds there or a cron expression.

Re: How to generate logs from a custom Python script?

mrrci — Mon, 25 Apr 2022 17:52:01 GMT

I did experiment with Cron scheduling but it doesn't really solve my problem. As I said, I need to execute it multiple times at once. Let's say I need to run that script 100 000 consecutive times in a row. I didn't find anything to do it.