There is no error shown while sending data over socket using Python SDK. But the event is not available in search. Why?
import splunklib;
import config;
import splunklib.client as client
import socket
# Create a Service instance and log in
service = client.connect(
host=config.splunkconfig.get("host"),
port=config.splunkconfig.get("port"),
username=config.splunkconfig.get("user"),
password=config.splunkconfig.get("password"))
# Get the collection of indexes
indexes = service.indexes
# List the indexes and their event counts
for index in indexes:
#count = index["totalEventCount"]
print ((index.name))
# Retrieve the index for the data
myindex = service.indexes["main"]
# Open a socket
mysocket = myindex.attach(sourcetype="splunk_input_test")
# Send events to it
data=b'This is my splunk test event\r\n'
mysocket.sendall(data)
# Close the socket
mysocket.close()
