Splunk Dev

Is it possible to make log using python script on splunk server?

bkhwang
Explorer

Hello!!

If a new event log is generated in the index, is it possible the Python script reads the event log and generates a new log?

I want to analyze event log by python script and draw a graph on dashboard by analyzed new log.

Labels (2)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

You could create a summary index based on a report of the events in the first index and then create a chart based on the values in the summary index. If your summary index needs particular processing that is not possible with standard SPL, you could write your own custom command (in python) and feed the events from the first index to that before writing the results to the summary index.

View solution in original post

bkhwang
Explorer

Thank you for your feedback @ITWhisperer 

Can you link me if there is a document related to it?
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

You could create a summary index based on a report of the events in the first index and then create a chart based on the values in the summary index. If your summary index needs particular processing that is not possible with standard SPL, you could write your own custom command (in python) and feed the events from the first index to that before writing the results to the summary index.

Get Updates on the Splunk Community!

Enter the Splunk Community Dashboard Challenge for Your Chance to Win!

The Splunk Community Dashboard Challenge is underway! This is your chance to showcase your skills in creating ...

.conf24 | Session Scheduler is Live!!

.conf24 is happening June 11 - 14 in Las Vegas, and we are thrilled to announce that the conference catalog ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...