https://community.splunk.com/t5/Splunk-Dev/How-to-pass-the-value-of-the-field-to-the-script-as-a-parameter/m-p/384447#M6409 <P>Been a while, here's what I remember. <CODE>Import sys</CODE>. You can send in args via argv. <CODE>TEXTSTRING = sys.argv[1]</CODE></P> <P>Then when running the custom search command you just put 'em after the command. <CODE>| script myscript arg1 arg2 ...</CODE></P> Mon, 03 Jun 2019 20:54:40 GMT hallt3 2019-06-03T20:54:40Z https://community.splunk.com/t5/Splunk-Dev/How-to-pass-the-value-of-the-field-to-the-script-as-a-parameter/m-p/384442#M6404 <P>Hi everyone,</P> <P>I have created a custom command in Python that needs a parameter, which is one of the fields of the search.</P> <P>The script is as the following:</P> <PRE><CODE>import splunk.Intersplunk def foofunct(text): output = //Doing something with text return output keywords, options = splunk.Intersplunk.getKeywordsAndOptions() results,unused1,unused2 = splunk.Intersplunk.getOrganizedResults() for result in results: result["foo"] = foofunct(keywords) splunk.Intersplunk.outputResults(results) </CODE></PRE> <P>When I insert the parameter directly in the tests, it works perfectly, but when I put the name of the field, it doesn't take the value of the field, it takes the name of the field as a parameter.</P> <P>Is there any way to pass the value of the field to the script as a parameter?</P> <P>Thanks for all.</P> <P>Regards</P> Wed, 17 Jun 2020 23:04:36 GMT https://community.splunk.com/t5/Splunk-Dev/How-to-pass-the-value-of-the-field-to-the-script-as-a-parameter/m-p/384442#M6404 pbalbasm 2020-06-17T23:04:36Z https://community.splunk.com/t5/Splunk-Dev/How-to-pass-the-value-of-the-field-to-the-script-as-a-parameter/m-p/384443#M6405 <P>Why doesn't anybody help?</P> Sun, 02 Jun 2019 18:20:56 GMT https://community.splunk.com/t5/Splunk-Dev/How-to-pass-the-value-of-the-field-to-the-script-as-a-parameter/m-p/384443#M6405 highsplunker 2019-06-02T18:20:56Z https://community.splunk.com/t5/Splunk-Dev/How-to-pass-the-value-of-the-field-to-the-script-as-a-parameter/m-p/384444#M6406 <P>How are you using this custom command in your searches?</P> Mon, 03 Jun 2019 16:19:55 GMT https://community.splunk.com/t5/Splunk-Dev/How-to-pass-the-value-of-the-field-to-the-script-as-a-parameter/m-p/384444#M6406 alonsocaio 2019-06-03T16:19:55Z https://community.splunk.com/t5/Splunk-Dev/How-to-pass-the-value-of-the-field-to-the-script-as-a-parameter/m-p/384445#M6407 <P>The question is how to pass parameters in and out of custom python script. This script is just an example.</P> Mon, 03 Jun 2019 16:37:17 GMT https://community.splunk.com/t5/Splunk-Dev/How-to-pass-the-value-of-the-field-to-the-script-as-a-parameter/m-p/384445#M6407 highsplunker 2019-06-03T16:37:17Z https://community.splunk.com/t5/Splunk-Dev/How-to-pass-the-value-of-the-field-to-the-script-as-a-parameter/m-p/384446#M6408 <P>I got it, but you said that when you put the name of the field as a parameter It does not get the field value, but the field name, so I am supposing you tried running this command from Splunk, right? If you tried running it from Splunk, I'd like to know how you used the command.</P> Mon, 03 Jun 2019 16:40:44 GMT https://community.splunk.com/t5/Splunk-Dev/How-to-pass-the-value-of-the-field-to-the-script-as-a-parameter/m-p/384446#M6408 alonsocaio 2019-06-03T16:40:44Z https://community.splunk.com/t5/Splunk-Dev/How-to-pass-the-value-of-the-field-to-the-script-as-a-parameter/m-p/384447#M6409 <P>Been a while, here's what I remember. <CODE>Import sys</CODE>. You can send in args via argv. <CODE>TEXTSTRING = sys.argv[1]</CODE></P> <P>Then when running the custom search command you just put 'em after the command. <CODE>| script myscript arg1 arg2 ...</CODE></P> Mon, 03 Jun 2019 20:54:40 GMT https://community.splunk.com/t5/Splunk-Dev/How-to-pass-the-value-of-the-field-to-the-script-as-a-parameter/m-p/384447#M6409 hallt3 2019-06-03T20:54:40Z https://community.splunk.com/t5/Splunk-Dev/How-to-pass-the-value-of-the-field-to-the-script-as-a-parameter/m-p/384448#M6410 <P>For me, the solution was to create a Javascript in the view wich launches a search with the correct parameters, so the keywords are values taken directly from the javascript.</P> Tue, 04 Jun 2019 08:37:13 GMT https://community.splunk.com/t5/Splunk-Dev/How-to-pass-the-value-of-the-field-to-the-script-as-a-parameter/m-p/384448#M6410 pbalbasm 2019-06-04T08:37:13Z