Developing for Splunk Enterprise

Moving from splunk2.jar to new jar file splunk-1.0.jar

New Member

Right now when we are using the splunk2.jar and we are using the code

SplunkClient client = new SplunkClient(url.trim()+":"+port.trim());
client.login(username, password);
SearchManager smgr = client.getSearchManager();

JobParameters jobParameters = new JobParameters(); jobParameters.Search = prequery + query.trim(); jobParameters.setEarliestTime(startDate);

SearchJob job = smgr.dispatchAndWait(jobParameters);
CookedParameters cp = new CookedParameters(); List fields = new ArrayList(); fields.add("_raw"); fields.add("host"); fields.add("sourcetype"); fields.add("source"); cp.FieldList = fields; cp.Count = 2500;

JsonArray jsa = job.getCookedResultsJSON(cp);

But now we wanted to upgrade to splunk-1.0.jar file. None of this code is compatable with the splunk-1.0 jar. How will the code change with respect to the new jar file?

0 Karma

Splunk Employee
Splunk Employee

The splunk2.jar on is legacy code and no longer available and/or supported. The SDKs available on Developer Platform are the ones that are officially kept up to date with the latest Splunk versions.

Unfortunately there is no documented migration path but we have very rich documentation on the the Splunk SDK for Java. How-To section has sample code for running searches and displaying results. You can use that as a reference and update your code accordingly.

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!