Getting Data In

python script return json, and show a table in search.

xuehui
New Member

I use python script to get json data thouth an API, and i want show them in a table in splunk search.
the python script used print(json) method, and the splunk used "|script ***" command.
but the splunk search result was only a part of json data(before ther first comma).
Why? and what should i do to show all json data in a table?
please help me,thanks.

0 Karma

woodcock
Esteemed Legend

Ideally splunk likes 100% true JSON which means NO SPACES. So make sure that your script does NOT output pretty JSON but true or compact JSON and Splunk should like it just fine. When Splunk presents it to you in search, it will pretty it for you then.

0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...