Splunk Dev

Is it possible to make log using python script on splunk server?

bkhwang
Explorer

Hello!!

If a new event log is generated in the index, is it possible the Python script reads the event log and generates a new log?

I want to analyze event log by python script and draw a graph on dashboard by analyzed new log.

Labels (2)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust

You could create a summary index based on a report of the events in the first index and then create a chart based on the values in the summary index. If your summary index needs particular processing that is not possible with standard SPL, you could write your own custom command (in python) and feed the events from the first index to that before writing the results to the summary index.

View solution in original post

bkhwang
Explorer

Thank you for your feedback @ITWhisperer 

Can you link me if there is a document related to it?
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

You could create a summary index based on a report of the events in the first index and then create a chart based on the values in the summary index. If your summary index needs particular processing that is not possible with standard SPL, you could write your own custom command (in python) and feed the events from the first index to that before writing the results to the summary index.

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...