- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
When using the Python-SDK, why is Splunk silently returning nothing for some indices?
haffi112
New Member
12-13-2018
07:13 AM
I'm trying to use the Python SDK to search in Splunk.
However, I can only search on some indices, for others I just get an empty response.
For example, when I use the command
search index=trace
I get a response, but when I use
search index=read
I don't get any response. But if I use the web interface this query works, i.e. my user has rights to search on that index and I am authenticating myself when using the Python-SDK.
Do you have any idea what could explain this? The silent returning of nothing is not helping me.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
haffi112
New Member
12-14-2018
06:36 AM
I have confirmed with an administrator that it is not a problem with access rights as the script shows the same behavior when he authenticates with his user.
