Splunk Dev

How to use `import mysplunksearch` instead of `$splunk cmd python myslplunksearch`?

boris
Path Finder

On the same machine that I am running Splunk, I want to integrate python splunk search results inside python code outside of the Splunk directory.

For example inside Splunk directory we can do the following (splunkbase source) :

$ splunk cmd python my_searcher.py 

How can I now extend this to outside without needing to use splunk cmd, for example, I would like to import my new splunk search module into other python code using this instead:

>>> import my_searcher
Tags (2)
0 Karma

gkanapathy
Splunk Employee
Splunk Employee

You should probably be using the Splunk Python SDK, instead of calling the command-line utilities.

See: http://dev.splunk.com/view/python-sdk/SP-CAAAEBB

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Rethinking Zero Trust: From Product Purchases to Logical Control Evidence

Implementing Zero Trust (ZT) across complex environments often falters at the very beginning due to a ...

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...