Developing for Splunk Enterprise

Indexing the results from the running an inspect using the CLI version of splunk-appinspect?

chris_barrett
Path Finder

Before I go and re-invent the wheel, has anyone looked at indexing the results from the running an inspect using the CLI version of splunk-appinspect?

The --output-file is, by default, JSON and has a start_time field in it which could be used for the event's _time.

And, if you run it with --generate-feedback, then you get a YAML file which can be converted to JSON using the yq command.  The result JSON file also has a start_time field in it which could be used for the event's _time.

As for a use-case... I don't know (yet).  At this stage, it's really just a wouldn't it be cool to ...

Labels (2)
Tags (1)
0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!