Splunk Dev

How to read stanza from local app.conf pragmatically in a modular input python?

elephant
Engager

I have some configurations in local app.conf and I would like to read them pragmatically. before streaming events

How to do it using python?

Thanks!
Labels (4)
0 Karma

pmeyerson
Path Finder

Your custom modular input script class should inherit from splunklib.modularinput
But you cannot access the service object in __init__, only in stream_events() onwards as thats when your code receives the payload from Splunk to construct the Service object.

You can use service object at the beginning of your stream_events(inputs, ew):
   stanza = self.service.confs["app"]

https://dev.splunk.com/enterprise/docs/devtools/python/sdk-python/howtousesplunkpython/howtocreatemo...

https://docs.splunk.com/DocumentationStatic/PythonSDK/2.0.1/modularinput.html#splunklib.modularinput...

0 Karma

elephant
Engager

Thank you

 

And how do you read properties from it?

I was looking in the documents you have attached and could not find reference to self.service.confs object... 

could you please attach an example of how to read a specific prop from a specific stanza?

 

Than you 

0 Karma
Get Updates on the Splunk Community!

Shape the Future of Splunk: Join the Product Research Lab!

Join the Splunk Product Research Lab and connect with us in the Slack channel #product-research-lab to get ...

Auto-Injector for Everything Else: Making OpenTelemetry Truly Universal

You might have seen Splunk’s recent announcement about donating the OpenTelemetry Injector to the ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...