Splunk Dev

I am beginner at python programming so asking your help to write short simple script.

jjoshi6
Explorer

My manager asked to send one file named "data.json" to splunk using python language and HTTP event collector. I tried to do it but I think as I am beginner in python, I don't know how to write the whole script that will do my work. Can anyone help me with this?

Labels (3)
0 Karma

inventsekar
SplunkTrust
SplunkTrust

Hi @jjoshi6 .. you seems to be newbie to both python and splunk.. so its a big task i would say to a newbie. 

so, lets do this step by step... 

1. have you configured data ingestion from a UF to indexer? 

2. have you configured some "scripted inputs" from a UF to indexer?

3. have you configured a basic HEC data input to indexer..

 

once you done these you will feel more comfortable and then you can check the github page which @richgalloway given above. hope its clear, all the best to your splunk and python journey!

 

As a new member, you may not know about karma points,.. karma points will show your appreciation. thanks!

0 Karma

richgalloway
SplunkTrust
SplunkTrust

See if this helps https://github.com/georgestarcher/Splunk-Class-httpevent

---
If this reply helps you, Karma would be appreciated.

jjoshi6
Explorer

Can you please share if you have any source code which I can view it as a reference?

It would be really helpful if you can share the script where I can enter the file location, URL, and token and run the file to make it work as I am really struggling with my time and work. Please.

I would really appreciate your help and I will be happy to provide karma.

Thanks in advance.

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...