Splunk Dev

How to use `import mysplunksearch` instead of `$splunk cmd python myslplunksearch`?

boris
Path Finder

On the same machine that I am running Splunk, I want to integrate python splunk search results inside python code outside of the Splunk directory.

For example inside Splunk directory we can do the following (splunkbase source) :

$ splunk cmd python my_searcher.py 

How can I now extend this to outside without needing to use splunk cmd, for example, I would like to import my new splunk search module into other python code using this instead:

>>> import my_searcher
Tags (2)
0 Karma

gkanapathy
Splunk Employee
Splunk Employee

You should probably be using the Splunk Python SDK, instead of calling the command-line utilities.

See: http://dev.splunk.com/view/python-sdk/SP-CAAAEBB

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...