https://community.splunk.com/t5/Knowledge-Management/How-to-get-a-custom-search-script-to-work/m-p/32401#M7069 <P>I will give you credit for your answer but the Splunk documentatio is not very clear an conflicts with comments in the applications files. I think I will leave well enough alone for now. This should not be this difficult.</P> Fri, 20 Apr 2012 19:27:00 GMT brettski 2012-04-20T19:27:00Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-a-custom-search-script-to-work/m-p/32397#M7065 <P>I am trying to get a custom search script to work following the instructions on this page: <A href="http://docs.splunk.com/Documentation/Splunk/4.3/SearchReference/Script" target="_blank">http://docs.splunk.com/Documentation/Splunk/4.3/SearchReference/Script</A> .</P> <P>The instructions say to put the file in, splunk_home/etc/searchscripts, which doesn't exist in my 4.2.2 installation. I found splunk_home/etc/search/scripts, though that does work either. I have also tried creating the folder. Each time I restarted the service, just in case. Will someone please supply the basics on what is needed to get the search script to work?</P> <P>I am trying to use this script: <A href="https://github.com/JustinAzoff/splunk-scripts/blob/master/ua2os.py" target="_blank">https://github.com/JustinAzoff/splunk-scripts/blob/master/ua2os.py</A></P> Mon, 28 Sep 2020 11:42:11 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-a-custom-search-script-to-work/m-p/32397#M7065 brettski 2020-09-28T11:42:11Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-a-custom-search-script-to-work/m-p/32398#M7066 <P>I assume that python script is a custom search command. Look here in the documentation and this should get you on track.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/4.2.2/SearchReference/WriteaPythonsearchcommand">http://docs.splunk.com/Documentation/Splunk/4.2.2/SearchReference/WriteaPythonsearchcommand</A></P> Fri, 20 Apr 2012 18:13:13 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-a-custom-search-script-to-work/m-p/32398#M7066 sdaniels 2012-04-20T18:13:13Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-a-custom-search-script-to-work/m-p/32399#M7067 <P>Strange, I just retried both links with no issues. Yes, it is a custom search command. Based on the link you supplied, I need to create an application to run the custom search command under? Or can the app be 'Search'?</P> Fri, 20 Apr 2012 19:17:24 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-a-custom-search-script-to-work/m-p/32399#M7067 brettski 2012-04-20T19:17:24Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-a-custom-search-script-to-work/m-p/32400#M7068 <P>Yes, you can put it under the search app</P> Fri, 20 Apr 2012 19:19:15 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-a-custom-search-script-to-work/m-p/32400#M7068 sdaniels 2012-04-20T19:19:15Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-a-custom-search-script-to-work/m-p/32401#M7069 <P>I will give you credit for your answer but the Splunk documentatio is not very clear an conflicts with comments in the applications files. I think I will leave well enough alone for now. This should not be this difficult.</P> Fri, 20 Apr 2012 19:27:00 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-a-custom-search-script-to-work/m-p/32401#M7069 brettski 2012-04-20T19:27:00Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-a-custom-search-script-to-work/m-p/32402#M7070 <P>Once you go through it...just let me know <A href="mailto:sdaniels@splunk.com">sdaniels@splunk.com</A>. I'll be happy to get the docs changed to make sure they are in sync. Apologies for any confusion there.</P> Fri, 20 Apr 2012 19:29:46 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-a-custom-search-script-to-work/m-p/32402#M7070 sdaniels 2012-04-20T19:29:46Z https://community.splunk.com/t5/Knowledge-Management/How-to-get-a-custom-search-script-to-work/m-p/32403#M7071 <P>brettski, did you get this script working? Im at a halt trying to figure how to get it to work. I've tried all links suggested in this post but Splunk is not recognizing this app.</P> Wed, 14 Nov 2012 20:03:07 GMT https://community.splunk.com/t5/Knowledge-Management/How-to-get-a-custom-search-script-to-work/m-p/32403#M7071 ten_yard_fight 2012-11-14T20:03:07Z