Hi,
My requirement is to fetch events from Splunk using Splunk SDK for Python. My search query is ready and I have to execute it using either of these APIs
oneshot
OR
export
Although, the above APIs are being well defined in Splunk documentation but I want a detailed explaination on when to use which one. And This will help me in deciding which one.
To be more specific, my requirement is get events from Splunk every hour.
Thanks