Splunk Dev

I am beginner at python programming so asking your help to write short simple script.

jjoshi6
Explorer

My manager asked to send one file named "data.json" to splunk using python language and HTTP event collector. I tried to do it but I think as I am beginner in python, I don't know how to write the whole script that will do my work. Can anyone help me with this?

Labels (3)
0 Karma

inventsekar
SplunkTrust
SplunkTrust

Hi @jjoshi6 .. you seems to be newbie to both python and splunk.. so its a big task i would say to a newbie. 

so, lets do this step by step... 

1. have you configured data ingestion from a UF to indexer? 

2. have you configured some "scripted inputs" from a UF to indexer?

3. have you configured a basic HEC data input to indexer..

 

once you done these you will feel more comfortable and then you can check the github page which @richgalloway given above. hope its clear, all the best to your splunk and python journey!

 

As a new member, you may not know about karma points,.. karma points will show your appreciation. thanks!

0 Karma

richgalloway
SplunkTrust
SplunkTrust

See if this helps https://github.com/georgestarcher/Splunk-Class-httpevent

---
If this reply helps you, Karma would be appreciated.

jjoshi6
Explorer

Can you please share if you have any source code which I can view it as a reference?

It would be really helpful if you can share the script where I can enter the file location, URL, and token and run the file to make it work as I am really struggling with my time and work. Please.

I would really appreciate your help and I will be happy to provide karma.

Thanks in advance.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

How to Break a Kubernetes Pod on Purpose and Let the AI Troubleshooting Agent Find ...

Let's say I've just rolled out a Kubernetes Deployment with a typo in the image tag. Nothing explodes. The pod ...

Splunk Add-on for Microsoft Windows 11.0.3: Parse Once, Search Faster

The updated Splunk Add-on for Microsoft Windows helps customers search Windows events faster by reducing ...

What's New in Splunk Enterprise Security 8.8 and Beyond

Threats move at machine speed. Keeping up should not depend on having the biggest budget, the largest team, or ...