topic Re: How to execute a script and display results on a search page? in Splunk Search

How to execute a script and display results on a search page?

tusharsaran1 — Fri, 20 Jul 2018 11:02:30 GMT

I need to execute a python script from Splunk search and display the return value on the same page. How can this be done?
I read about script command which allows us to pass an argument to an external script which has an entry in commands.conf. Does it also support displaying the values returned from this script?

Re: How to execute a script and display results on a search page?

thambisetty — Fri, 20 Jul 2018 11:05:30 GMT

Hi @tusharsaran1,

Please check out my app: https://splunkbase.splunk.com/app/3950/

Re: How to execute a script and display results on a search page?

tusharsaran1 — Fri, 20 Jul 2018 11:15:25 GMT

I am not sure I understand how is this app similar to what I am looking for. Can you please explain exactly what your app does?

Re: How to execute a script and display results on a search page?

thambisetty — Fri, 20 Jul 2018 11:23:10 GMT

This app is used to check any email id is pwned or not in haveibeenpwned.com site.

Input - it takes any field contains email id and calls haveibeenpwened.com to query email id details and result will be parsed in python script and parsed result will be sent back to search.

please go through hipb.py in the TA. you will understand if you have coding background.

To understand more how this TA-works please read the description provided in splunkbase.

Re: How to execute a script and display results on a search page?

PowerPacked — Fri, 20 Jul 2018 16:36:15 GMT

Hi @tusharsaran1

Yes, you can do that

as you mentioned create a command which calls the python script, in the python script import the Intersplunk.py module which is availabale in $SplunkHome$/lib/python2.7/sitepackages/splunk.

This Intersplunk can do all the work for you, call the functions in the file like -- outputResults(),getOrganizedResults(),getKeywordsAndOptions()

in your case outputResults is the function which prints the results from python file to splunk UI.

Thanks

Re: How to execute a script and display results on a search page?

tusharsaran1 — Mon, 23 Jul 2018 09:10:44 GMT

Thanks! This is exactly what I needed.
I wrote a quick script to test this and it worked !