https://community.splunk.com/t5/Splunk-Enterprise-Security/Submit-and-Extract-xml-data/m-p/436315#M5776 <P>Hi, I submitted a xml string to specific index using (.submit()) in python.</P> <PRE><CODE> index = splunk_client.indexes[index_name] index.submit(attack, source=source, sourcetype=uuid, **params) </CODE></PRE> <P>Then,I tried to extract the data using </P> <PRE><CODE>kwargs_oneshot = {"count": 0} query = r"search index="stream_buffer"" try: oneshotsearch_results = splunk_client.jobs.oneshot(query, **kwargs_oneshot) query_results = results.ResultsReader(oneshotsearch_results) results_list = [result for result in query_results] except (ValueError, HTTPError): pass return results_list </CODE></PRE> <P>A 166 elements list returned -with the uploaded data- but not in the correct order - so I can't use the returned data.<BR /> How can I get the result in the correct order?</P> Tue, 05 Jun 2018 11:02:00 GMT avivz 2018-06-05T11:02:00Z https://community.splunk.com/t5/Splunk-Enterprise-Security/Submit-and-Extract-xml-data/m-p/436315#M5776 <P>Hi, I submitted a xml string to specific index using (.submit()) in python.</P> <PRE><CODE> index = splunk_client.indexes[index_name] index.submit(attack, source=source, sourcetype=uuid, **params) </CODE></PRE> <P>Then,I tried to extract the data using </P> <PRE><CODE>kwargs_oneshot = {"count": 0} query = r"search index="stream_buffer"" try: oneshotsearch_results = splunk_client.jobs.oneshot(query, **kwargs_oneshot) query_results = results.ResultsReader(oneshotsearch_results) results_list = [result for result in query_results] except (ValueError, HTTPError): pass return results_list </CODE></PRE> <P>A 166 elements list returned -with the uploaded data- but not in the correct order - so I can't use the returned data.<BR /> How can I get the result in the correct order?</P> Tue, 05 Jun 2018 11:02:00 GMT https://community.splunk.com/t5/Splunk-Enterprise-Security/Submit-and-Extract-xml-data/m-p/436315#M5776 avivz 2018-06-05T11:02:00Z