Splunk Dev

How to use `import mysplunksearch` instead of `$splunk cmd python myslplunksearch`?

boris
Path Finder

On the same machine that I am running Splunk, I want to integrate python splunk search results inside python code outside of the Splunk directory.

For example inside Splunk directory we can do the following (splunkbase source) :

$ splunk cmd python my_searcher.py 

How can I now extend this to outside without needing to use splunk cmd, for example, I would like to import my new splunk search module into other python code using this instead:

>>> import my_searcher
Tags (2)
0 Karma

gkanapathy
Splunk Employee
Splunk Employee

You should probably be using the Splunk Python SDK, instead of calling the command-line utilities.

See: http://dev.splunk.com/view/python-sdk/SP-CAAAEBB

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Skip the Awkward Silence: Have a .conf-ersation at .conf26

Picture this. You arrive at .conf26 already having your socializing and networking plans mapped out. No ...

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...