Pull data from a script(sh or py) to show in Splunk without indexing

[sibbsnb]

Hi,

I need a command like dbquery(dbconnect) which when executed in Splunk searh returns data from a script's output.

How do i do that?

Search
| mycommand parm1 parm2 | table abc, efg

Result
script output shown in splunk which can be manipulated further by SPL commands

[bgaignon · Accepted solution]

Hi,

If I understand well you want to execute a script and not a command.

If it's well a script then you can follow this great answer here: how-to-execute-external-script-to-manipulate-file-from-search-command

If you want dbquery there is an App, here is the doc: http://docs.splunk.com/Documentation/DBX/1.1.3/DeployDBX/Commands

But if you are looking to execute a custom command in the search line, then I will not be helpful.

[sibbsnb]

i was able to execute in a similar way as provided in that link to pull data from script.