Splunk search head's python library Vs Python 3.8

[vamsigurram]

Hi,

From the below github link, I see this python code, which works on the search head(linux), when I use this command.

/opt/splunk/bin/splunk cmd python ko_change.py

https://github.com/harsmarvania57/splunk-ko-change/blob/master/ko_change.py

I see below import statements.

import splunk.rest as rest
import splunk.auth as auth

When I use these, import statements, in my laptop, vscode, it get below error.

"ModuleNotFoundError: No Module named "splunk.auth";  'splunk' is not a package"

"ModuleNotFoundError: No Module named "splunk.rest";  'splunk' is not a package"

I have splunk-sdk installed in my vscode. splunklib is working.

So the question here is, how come the above import statements work on splunk search head(Linux) , but not in vscode (in my laptop), even when I have splunk-sdk installed?

What library, do I need to install, to make splunk.auth and splunk.rest work in vscode (on my windows laptop)

[harsmarvania57 · Accepted solution]

Hi,

I am developer/owner of that script and that script only works with Splunk Enterprise, you can't use that script with Splunk Python SDK.

Thanks,

Harshil

[inventsekar]

Hi @vamsigurram .. got a curious question.. when this works on Search Head, why you want to run this on laptop?!

just for learning!

[vamsigurram]

@inventsekar Yes, its for learning more on splunk.rest.

But as @harsmarvania57 mentioned, its a bummer why splunk-sdk does not have those libraries.

Now I have to code directly in linux (without vscode)

[inventsekar]

(oops, i had assumed that you have installed splunk on your laptop, my bad!)

... soo, on your laptop, you installed only  the "splunk-sdk" and tried to run that github file!!!

"the splunk-sdk always needs the Splunk, at its base"(as per my understanding).

[harsmarvania57]

You can use vscode but you need to install Splunk Enterprise on your desktop.

[vamsigurram]

Good idea.

I will try that. Thanks again for your help.

[thambisetty]

@vamsigurram 

Below is the location where you will find splunk python modules.

$SPLUNK_HOME/lib/python2.7/site-packages/splunk

$SPLUNK_HOME/lib/python3.7/site-packages/splunk

[thambisetty]

@harsmarvania57