Splunk Dev

[SDK Python] Where execute scripts *.py in cluster architecture (submit.py) ?

oxthon
New Member

Hello,

My questions is about Splunk Entreprise, Clustering and Script with SDK Python.
I want add some datas in some indexes which are on a cluster.

Architecture: 1 forwarder + 5 nodes + 3 searcheads + 1 master

I don't know where to run some scripts like submit.py
It's necessary my data be in cluster.

How do i configure my .splunkrc and where execute scripts ?

Thanks for your help.

Oxthon 🙂

MyConfig: >Splunk 7.1 : 1 forwarder -> 5 nodes <-> 3 searcheads <-> 1 master

0 Karma

chrisyounger
SplunkTrust
SplunkTrust

Hi @oxthon

If you want to run custom scripts it's a best practice to setup a heavy forwarder which can be a central place to do so. Just configure this to send the data to the indexers like you would with any other universal forwarder.

Good luck

0 Karma
Get Updates on the Splunk Community!

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...

[Live Demo] Watch SOC transformation in action with the reimagined Splunk Enterprise ...

Overwhelmed SOC? Splunk ES Has Your Back Tool sprawl, alert fatigue, and endless context switching are making ...

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...