How to expand macros in search using Splunk Python...

Splunk Dev

Is there a way to expand all macros of a search with the python SDK?
In the end we want to have the whole search text in a python variable to modify it.

So far our solution is to get the search text using the splunk SDK and then search for macros and replace them with the definition of the macro, which we have to get separately with the SDK.
What we like to have is some function, that returns the search text with all macros expanded.

Is there something like this in the SDK which we did not found so far?

Splunk Enterprise Version: 6.6.4

Thanks in advance

Get Updates on the Splunk Community!

Data Management Digest – August 2026

MichelleCorpora_1-1788182384472.png Welcome to the August 2026 edition of Data Management Digest! August was a ...

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next. Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...