Splunk Dev

Configure input script through UI

klausJohan
Path Finder

hello all,

I have a input script to index data into Splunk. Through UI I want to input some configuration parameters and then write them in a file. When the script is run it should read the file and if it finds what it needs go on retriving data. Otherwise nothing happens.

In order to achieve my goal I'm thinking to use a Form for displaying the UI widgets needed. Since I'm just a Splunk beginner I must ask whether this is feasible ? and if yes what technologies need to be employed ? I am particularly interested in the following details.

  • is it possible to build simple custom UI (buttons, text-edit, dropdown widget, list)
  • is it possible to execute a particular python script when some user event happens ( press a button, something from a list is selected)
  • is it possible to dinamically load items in a dropdown list ? (I plan to read them from a file)

Otherwise could you suggest other means of configuring my app through UI. I imagine this must be somehow possible since Splunk is MVC based.

The Splunk version for which this app is intended is 5.0.5

0 Karma

ckurtz
Path Finder

I believe this can be accomplished via the Modular Inputs capability in Splunk 5. However, take a look at Splunk 6, as a lot changes with it, and Modular Inputs may be different.

Also, look at this Splunk Blog entry on Modular Inputs: http://blogs.splunk.com/2013/04/16/modular-inputs-tools/

klausJohan
Path Finder

Also the docs mention a couple of times that Spluns is MVC based. This means there got to be some other way in which one could configure and control an app.

0 Karma

klausJohan
Path Finder

I have considered this, but I want to avoid this since 1)I don't want to share my custom Modular inputs with other applications. 2) I want to provide a unified experience within the application, all should be available from my app navigation menus.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...