Splunk Dev

splunk python api missing fields

smcconnell
New Member

I'm trying to use the python api for splunk following from the search example found here: http://dev.splunk.com/view/python-sdk/SP-CAAAEE5#normaljob. It's connecting to my application and returning data from a search, but certain fields that are visible when I search using the GUI are not present in the results I get via python.

I seem to be getting some custom fields, but not all of them. Any ideas why this could happen?

0 Karma

paramagurukarth
Builder

Try search dispath :

import splunk.auth
import splunk.search
sessionkey = splunk.auth.getSessionKey(username, password, baseurl)
splunk.search.STATUS_FETCH_TIMEOUT = 600
searchjob = splunk.search.dispatch(searchquery,sessionKey=sessionkey,hostPath=baseurl,earliestTime=earliestTime,latestTime=latestTime)
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...