Splunk Dev

How to run a python script to extract rows of data from a table?

minkyuk
Explorer

Good morning,

So I have a table of "name / disc / timestamp" and am trying to run a pre-written Python script on that specific name of server + corresponding disc.

| python_pdc disk SAMPLE_SERVER "SAMPLE_DISC" | count(eval(percentage < 90%)) ==> One row of information.

If I would like to repeat this process for the entire set of table, how could this be implemented?

Thank you in advance,
I would appreciate your input.
Jack

p.s.

Table:

name            disc      time
paoc2ock1d      D:        06/23/15

=> | python_pdc disk paoc2ock1d "D:" | count(eval(percentage < 90%)) as count
Expected output:

count       
2
Tags (2)
0 Karma

vinitatsky
Communicator

1) Create a lookup table in Splunk with sample_server and sample_disc
2) Run below command
|inputlookup table.csv | fields sample_server sample_disc | python_pdc sample_server sample_disc | count(eval(percentage < 90%)) as count

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...