Splunk Dev

Help with Python applications to programmatically interact with the Splunk engine

unnatiShukla
New Member

How can I write Python applications to programmatically interact with the Splunk engine. I am new to Splunk, can anyone please help me with the same. I have basic understanding with splunk queries etc. But quite new to built an apploication that interacts with Splunk engine.

Tags (2)
0 Karma

satishsdange
Builder

Splunk is a single piece of software for data collection, reporting & parsing. You can use the same binary to access core Splunk i.e. Use Search Head(s) to access Indexer(s).
Is there any specific requirement/need, you want to build a separate application using Python?

0 Karma

Damien_Dallimor
Ultra Champion

Start here with our Splunk Python SDK , there are loads of examples to get you started !

0 Karma

KenWhitesell
Path Finder

Generally speaking, programs written to access the Splunk engine are written to interact through the Splunk REST API.

There's plenty of information here regarding the API. A good place to start is
link text http://docs.splunk.com/Documentation/Splunk/6.1.3/Overview/Extending

Working directly with the REST API is possible, and sometimes the only way to accomplish certain tasks. But there are also a set of SDKs available that encapsulate a lot of the more intricate parts, making it easy to perform common functions.

Again, there's plenty of information on this site. A good place to start for the SDKs would be:
link text http://docs.splunk.com/Documentation/Splunk/6.1.3/AdvancedDev/SplunkSDKs

Finally, Splunk does offer specific SDK training. I just took the class almost a month ago and found it to be invaluable.
link text http://www.splunk.com/view/SP-CAAAHSH

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...