topic Re: Can REST API be used to execute a python script on Splunk server? in Getting Data In

Can REST API be used to execute a python script on Splunk server?

simpkins1958 — Thu, 13 Apr 2017 21:34:32 GMT

Could we add a custom python script on our Splunk server and have it executed from a client using the Splunk REST API?

Re: Can REST API be used to execute a python script on Splunk server?

jonmargulies — Fri, 14 Apr 2017 00:00:47 GMT

Yes! One way to do this is with a custom search command. Let's say your python script is called "testscript". You could rewrite as (or call it from) a Python script that Splunk recognizes as a custom search command, and then you could execute it as a Splunk search like this: "| testscript". Then you could call that search (adding arguments as needed) using the Splunk REST API.

Here's a link that explains how to create custom search commands: http://dev.splunk.com/view/python-sdk/SP-CAAAEU2
Here's the basic documentation on running a search from Python using Splunk's REST API: http://dev.splunk.com/view/python-sdk/SP-CAAAEE5

Re: Can REST API be used to execute a python script on Splunk server?

hardikJsheth — Fri, 14 Apr 2017 04:59:04 GMT

Yes you can do that. One of the way is Modular Inputs.

Re: Can REST API be used to execute a python script on Splunk server?

highsplunker — Thu, 23 May 2019 13:49:35 GMT

Guys,
why this does not work from a Linux myServer2?
curl -k -u 'myUser:myPwd' https://myServer1:8089/services/search/jobs/export -d search=" | makeresults | myScript " -d output_mode=csv

But OK for search = " | makeresults | eval myVal=777 "

Re: Can REST API be used to execute a python script on Splunk server?

highsplunker — Tue, 28 May 2019 08:26:51 GMT

Again. So poor support here...

Re: Can REST API be used to execute a python script on Splunk server?

highsplunker — Tue, 28 May 2019 09:08:01 GMT

SOLVED for similar case
"Error when I run custom Python script from one server to another sever using cURL (Search Factory: Unknown search command)"

https://answers.splunk.com/answers/747926/error-when-i-run-custom-python-script-from-one-ser.html?childToView=748251#answer-748251

Re: Can REST API be used to execute a python script on Splunk server?

paramagurukarth — Tue, 28 May 2019 11:13:22 GMT

Are you looking for something like this
https://wiki.splunk.com/Community:40GUIDevelopment