Developing for Splunk Enterprise
Highlighted

Why can the Splunk Python SDK add macros NAME and Definition but the Sharing and the Owner doesn't apply?

Builder

I do have a code like this
service.post('/servicesNS/nobody/search/admin/macros/'+name,definition= "sample definition " ,sharing="global",owner="ME")

It can add macros NAME and Definition but the Sharing and the Owner doesn't apply.
How can I possibly do this?

Thanks in advance

0 Karma
Highlighted

Re: Why can the Splunk Python SDK add macros NAME and Definition but the Sharing and the Owner doesn't apply?

Builder

I already answer this question .
1) your app must be on GLOBAL first , it conflict some of the code if it is set as app
2) And put this code :

service.post('properties/macros',__stanza=name,sharing="global",app='appname',owner='admin')
service.post('properties/macros/'+name,definition=val)

By this code i done the task

0 Karma
Highlighted

Re: Why can the Splunk Python SDK add macros NAME and Definition but the Sharing and the Owner doesn't apply?

Builder

I already answer this question .
1) your app must be on GLOBAL first , it conflict some of the code if it is set as app
2) And put this code :

service.post('properties/macros',__stanza=name,sharing="global",app='appname',owner='admin')
service.post('properties/macros/'+name,definition=val)

By this code i done the task

View solution in original post

0 Karma