topic Re: How to pass value to python script from a Input.conf in Getting Data In

How to pass value to python script from a Input.conf

DataOrg — Wed, 01 Apr 2020 13:34:44 GMT

i need to pass the host value in the URL from external file to the python script. how to pass it through conf file? please help

    import requests
    headers={
            "accept": "application/json",
            "content-type": "application/json"
        }
    res = requests.get('https://"<passvalue>"/home/method=post/end',headers=headers )

    print(res.text)


inputs.conf
[script://.\bin\gettinfdata.py]
interval = * * * * *
sourcetype = pythondata
disabled = False 
index = test

Re: How to pass value to python script from a Input.conf

PavelP — Wed, 01 Apr 2020 13:53:28 GMT

where is the external file located? Does the python script have an access to this file? You have to build all logic in the python script itself, the script stanza in inputs.conf doesn't accept any parameters, only the path to the script.

Other option is to use the .path file where you can use parameters:

cmd can also be a path to a file that ends with a ".path" suffix. A file
  with this suffix is a special type of pointer file that points to a command
  to be run. Although the pointer file is bound by the same location
  restrictions mentioned above, the command referenced inside it can reside
  anywhere on the file system. The .path file must contain exactly one line:
  the path to the command to run, optionally followed by command-line
  arguments. The file can contain additional empty lines and lines that begin
  with '#'. The input ignores these lines.

you can also use a wrapper script that first extract a host value from the file and pass it as parameter to the script

Re: How to pass value to python script from a Input.conf

to4kawa — Wed, 01 Apr 2020 21:12:48 GMT

see
https://answers.splunk.com/answers/489612/how-to-use-python-scripts-as-a-scripted-input-for.html

Re: How to pass value to python script from a Input.conf

DataOrg — Mon, 13 Apr 2020 07:43:51 GMT

@PavelP i tried using .path file to pass arguments, still it doesnt work, could you please check whether the stanza.

$SPLUNK_HOME\etc\apps\apps\bin\sample.py 'host1'

Re: How to pass value to python script from a Input.conf

DataOrg — Mon, 13 Apr 2020 07:44:51 GMT

@kamlesh_vaghela can you please help me here?

Re: How to pass value to python script from a Input.conf

kamlesh_vaghela — Mon, 13 Apr 2020 09:09:12 GMT

@premranjithj

When dynamic parameter comes, I aways suggest Modular input over scripted input. It has its own features.

https://docs.splunk.com/Documentation/Splunk/6.4.3/AdvancedDev/ModInputsIntro

Input scripted input did you tried passing an argument in the script?

 [script://.\bin\gettinfdata.py HostName]

Re: How to pass value to python script from a Input.conf

PavelP — Wed, 30 Sep 2020 05:00:13 GMT

@DataOrg : are you sure the your sample.py script accept arguments? Hier is an example what I have in my .path file and it works:

/usr/sbin/tcpdump -pnns0 -i eth0 -tttt port 53

here is my inputs.conf:

[script://./bin/tcpdump.path]
interval = -1
disabled = 0 
sourcetype = port53tttt

here is my tcpdump.path file ($SPLUNK_HOME/etc/apps/TA_tcpdump/bin/tcpdump.path):

/usr/sbin/tcpdump -pnns0 -i eth0 -tttt port 53

Re: How to pass value to python script from a Input.conf

PavelP — Mon, 13 Apr 2020 12:50:53 GMT

Hello @premranjithj

here is an example based on your original script.

Modify your script to:

import requests
import sys

domain = sys.argv[1]

# here you need to add some input validation checks!!! DO NOT SKIP THIS STEP!!

headers={
         "accept": "application/json",
         "content-type": "application/json"
}

res = requests.get('http://' + domain ,headers=headers )

print(res.text)

here is your inputs.conf:

[script://.\bin\gettinfdata.path]
interval = * * * * *
sourcetype = pythondata
disabled = False 
index = test

here is your gettinfdata.path:
.\bin\gettinfdata.path example.com

But if I understand you right you need to pass the host value in the URL from external file to the python script.

So instead I'd just modify your .py script and add a code part to read from an external file.

Please describe what is your use case and where is the external file located and what is its content.

Re: How to pass value to python script from a Input.conf

to4kawa — Mon, 13 Apr 2020 13:02:08 GMT

Hi @PaveIP
https://answers.splunk.com/answers/816567/splunk-python-with-pandas.html
Can you resolve this?

Re: How to pass value to python script from a Input.conf

DataOrg — Thu, 23 Apr 2020 08:15:08 GMT

@kamlesh_vaghela it worked.thanks

Re: How to pass value to python script from a Input.conf

kamlesh_vaghela — Thu, 23 Apr 2020 10:07:44 GMT

Glad to help you @premranjithj 🙂