My group and I are creating a senior project for a SIEM through a VM. We were planning to implement Splunk dashboards into the project with python code. To give some background we are starting from scratch with python code, and we would like to implement Splunk dashboards into that python code. In short, when we run the python code we would like the Splunks GUI to pop up ( which ever one we choose: charts, pie charts, global map) with the data that we are collecting through the python code. Is there a way we can achieve this goal?
Python is the least important thing here. The question is a about the overall architecture of your solution. What exactly do you want to achieve technically? Because, you know, Splunk dashboards are not something you can "pull" out of Splunk and use without Splunk.
So what are you trying to do?
We are creating a SOC with an SIEM that we would like to implement Splunk into. We are making the Splunk dashboard but would like to use Splunk in our code. It's okay if we have Splunk running in the background but we would like to pull some GUI of Splunk into our code. In short, we are creating a Splunk dashboard through python code.
OK. You still don't answer the low-level what and how questions. From the technical point of view it's irrelevant whether you're writing a SOC tool or just a web-based demo for the customers. It's important what exactly do you want to "use" and how are you planning to do that. Honestly, if you have an idea what you're trying to do, it's easier for you to search for the answer on your own. The question has been asked several times before and the answer is relatively easy to find and I don't want to give it to you on a silver platter because what I think you're trying to do has some important consequences which you must understand.