Hi,
I need a command like dbquery(dbconnect) which when executed in Splunk searh returns data from a script's output.
How do i do that?
Search
| mycommand parm1 parm2 | table abc, efg
Result
script output shown in splunk which can be manipulated further by SPL commands
Hi,
If I understand well you want to execute a script and not a command.
If it's well a script then you can follow this great answer here: how-to-execute-external-script-to-manipulate-file-from-search-command
If you want dbquery there is an App, here is the doc: http://docs.splunk.com/Documentation/DBX/1.1.3/DeployDBX/Commands
But if you are looking to execute a custom command in the search line, then I will not be helpful.
Hi,
If I understand well you want to execute a script and not a command.
If it's well a script then you can follow this great answer here: how-to-execute-external-script-to-manipulate-file-from-search-command
If you want dbquery there is an App, here is the doc: http://docs.splunk.com/Documentation/DBX/1.1.3/DeployDBX/Commands
But if you are looking to execute a custom command in the search line, then I will not be helpful.
i was able to execute in a similar way as provided in that link to pull data from script.