Splunk Dev

How to generate logs from a custom Python script?

mrrci
Explorer

Hey there Splunk community. I'm new here and I would appreciate some help if it is possible.

So, I have to create a Splunk app that runs a Python script each day and it should generate random log events and index them into Splunk.

I'm not sure what's the best approach for this. I already wrote a custom script and successfully tested it by implementing it in Splunk (Data Inputs > Scripts...) but I don't know how to run it once a day and get x amount of log events.

I did use Cron schedule for scheduling it once a day but I only get one log event. Is there a way Splunk can run a script x amount of times at once?

Thank you!

Tags (2)
0 Karma

Azeemering
Builder

Without going into a lot of other settings that you need to apply you can run a rudimentary inputs

Create a splunk app with a structure like this

yoursplunkapp\bin\yourpythonscripthere.py

yoursplunkapp\local\inputs.conf

[script://$SPLUNK_HOME/etc/apps/yoursplunkapp/bin/yourpythonscripthere.py]
interval = 30
index=foo
sourcetype=faa

 

This will run your script every 30 seconds. You can use seconds there or a cron expression.

0 Karma

mrrci
Explorer

I did experiment with Cron scheduling but it doesn't really solve my problem. As I said, I need to execute it multiple times at once. Let's say I need to run that script 100 000 consecutive times in a row. I didn't find anything to do it.

0 Karma
Get Updates on the Splunk Community!

New in Splunk Observability Cloud: Automated Archiving for Unused Metrics

Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...

Calling All Security Pros: Ready to Race Through Boston?

Hey Splunkers, .conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...

What's New in Splunk Observability - July 2025

What’s New?  We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what ...