Building for the Splunk Platform

Is it possible to show rows as they are yielded from GeneratingCommand?

dedupper
Explorer

I have written an addon that gets data from an API and yields rows from it one by one in a loop. I use the GeneratingCommand class from splunklib. When I run it in the search-head, it runs for a time, and then returns all the rows at once. So it seems that Splunk buffers the results until the whole process is complete, even though the addon code itself has no such buffering.

Is it possible to have it show the rows in the search-head as they are yielded, similar to how a normal Splunk search does?

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Dashboard Studio Challenge - Learn New Tricks, Showcase Your Skills, and Win Prizes!

Reimagine what you can do with your dashboards. Dashboard Studio is Splunk’s newest dashboard builder to ...

Introducing Edge Processor: Next Gen Data Transformation

We get it - not only can it take a lot of time, money and resources to get data into Splunk, but it also takes ...

Take the 2021 Splunk Career Survey for $50 in Amazon Cash

Help us learn about how Splunk has impacted your career by taking the 2021 Splunk Career Survey. Last year’s ...