We are trying to develop an external application that pulls data from Splunk via the Python SDK.
We had a couple of questions.
whether we need to explicitly log-out of service calls (and if not what the implications are)
"""A Pythonic binding to Splunk instances
Do we need to explicitly logout of
we’re finding we’re needing to make a lot of splunk restarts to pick-up changes – any hints/tips/guidance on compiler interaction with Splunk (or even general Best Practice) would help!
Also, do we have some documented Best Practices for the Python SDK?
Any input would be greatly appreciated.
/debug/refreshstrategies, as well as how to customize other caching parameters that help minimize the need for any action documented at Customization options and caching. Just remember that if something doesn't seem to take effect through one of those approaches, always revert back to a classic restart rather than assuming it's broken - these approaches may not work 100% of all times you'd expect them to (simply because we expect too much lol).