Hi all,
I try to develop a custom Python script and i want to input parameter from Search to my script. Could i do it?
Example my script name is compare (already register on searchhead), and it need 2 parameter to work, like: | makeresults a=1 | compare file1.csv file2.csv (file1.csv, file2.csv is parameter).
Thanks so much.
@TNV20 - If you are using Splunklib (Splunk-SDK-Python) then you could do it with Option.
https://docs.splunk.com/DocumentationStatic/PythonSDK/1.7.2/searchcommands.html
from splunklib.searchcommands.decorators import Option
file1 = Option(
doc=''' **Syntax:** **file=***<file1>*
**Description:** Name of the first file''',
require=True)
And you can use it like:
| compare file1="file1.csv" file2="file2.csv"
I hope this helps!!!