Splunk Dev

Configure input script through UI

klausJohan
Path Finder

hello all,

I have a input script to index data into Splunk. Through UI I want to input some configuration parameters and then write them in a file. When the script is run it should read the file and if it finds what it needs go on retriving data. Otherwise nothing happens.

In order to achieve my goal I'm thinking to use a Form for displaying the UI widgets needed. Since I'm just a Splunk beginner I must ask whether this is feasible ? and if yes what technologies need to be employed ? I am particularly interested in the following details.

  • is it possible to build simple custom UI (buttons, text-edit, dropdown widget, list)
  • is it possible to execute a particular python script when some user event happens ( press a button, something from a list is selected)
  • is it possible to dinamically load items in a dropdown list ? (I plan to read them from a file)

Otherwise could you suggest other means of configuring my app through UI. I imagine this must be somehow possible since Splunk is MVC based.

The Splunk version for which this app is intended is 5.0.5

0 Karma

ckurtz
Path Finder

I believe this can be accomplished via the Modular Inputs capability in Splunk 5. However, take a look at Splunk 6, as a lot changes with it, and Modular Inputs may be different.

Also, look at this Splunk Blog entry on Modular Inputs: http://blogs.splunk.com/2013/04/16/modular-inputs-tools/

klausJohan
Path Finder

Also the docs mention a couple of times that Spluns is MVC based. This means there got to be some other way in which one could configure and control an app.

0 Karma

klausJohan
Path Finder

I have considered this, but I want to avoid this since 1)I don't want to share my custom Modular inputs with other applications. 2) I want to provide a unified experience within the application, all should be available from my app navigation menus.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

How to find the worst searches in your Splunk environment and how to fix them

Everyone knows Splunk is a powerful platform for running searches and doing data analytics. Your ...

Share Your Feedback: On Admin Config Service (ACS)!

Help Us Build a Better Admin Config Service Experience (ACS)   We Want Your Feedback on Admin Config Service ...