Splunk Dev

Is it possible to make log using python script on splunk server?

bkhwang
Explorer

Hello!!

If a new event log is generated in the index, is it possible the Python script reads the event log and generates a new log?

I want to analyze event log by python script and draw a graph on dashboard by analyzed new log.

Labels (2)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

You could create a summary index based on a report of the events in the first index and then create a chart based on the values in the summary index. If your summary index needs particular processing that is not possible with standard SPL, you could write your own custom command (in python) and feed the events from the first index to that before writing the results to the summary index.

View solution in original post

bkhwang
Explorer

Thank you for your feedback @ITWhisperer 

Can you link me if there is a document related to it?
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

You could create a summary index based on a report of the events in the first index and then create a chart based on the values in the summary index. If your summary index needs particular processing that is not possible with standard SPL, you could write your own custom command (in python) and feed the events from the first index to that before writing the results to the summary index.

Get Updates on the Splunk Community!

AI for AppInspect

We’re excited to announce two new updates to AppInspect designed to save you time and make the app approval ...

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...