Splunk Dev

Custom Python Command to read a CSV file

marvinlee93
Explorer

I have created a custom python command but I'm facing this problem. I have a dynamic fileName.
The filename that I want to read changes everyday.
It works fine before I package the code using the splunk streaming command.

with open('C:\Users\Desktop\%s\%s\%s'%('assetfiles','DailySchedule',fileName)) as csv_file:
This will give me:
C:\Users\KGQJ3999\Desktop\assetfiles\assetfiles\DailySchedule\2019-12-20_NAME1.csv

However, after packaging it into the streaming command, it's giving me this.
C:\Users\KGQJ3999\Desktop\assetfiles\assetfiles\DailySchedule\ .csv

I have tried many ways to concatenate strings. Even forcing the filename to be str(fileName). Still, the fileName is dissappearing from the splunk side and I'm getting the IO error.

Anybody has any idea why??

Labels (1)
0 Karma

martynoconnor
Communicator

Is fileName a field that exists in your search results immediately before you | to your custom command? If not, I would have expected the script to error out (missing a required arg?) but perhaps it's carrying on with null/empty value and that's why you're getting a csv with no name?

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Index This | What travels the world but is also stuck in place?

April 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data

Realizing the full potential of your Splunk investment requires more than just understanding current usage; it ...

Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...

As data volumes continue to grow and environments become more distributed, managing and optimizing data ...