Splunk Enterprise Security

Splunk Web scripts and Splunk enterprise Scripts

DeepakND
Observer
Can someone help me understand the difference between Splunk Web and Splunk enterprise? and the Python scripts that interact with them?
"Splunk Web supports only Python 3.7" - Do they mean Scripts that read WebUI or is there some package like SplunkWeb for Python? 
 
"In Splunk Enterprise version 8.0, Splunk Enterprise continues to use the Python 2 interpreter globally by default, but Splunk Web supports only Python 3.7. Scripts and templates that depend on Splunk Web must be adjusted to use Python 3-compatible syntax before the upgrade, but you have several options for how and when you adjust Python scripts that aren't dependent on Splunk Web." 
Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Splunk Web is the GUI whereas Splunk Enterprise is the non-UI part of Splunk.  They used to be separate entities, but were merged some time ago.

Most Python scripts only interact with Splunk Enterprise.  I can't think of an example of one that interacts with Splunk Web.

It's a good idea to upgrade all of your scripts to use Python 3 since support for Python 2 will go away eventually.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.


Introducing Unified TDIR with the New Enterprise Security 8.2

Read the blog
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...