Splunk Search

How to use Source via Python SDK

harshal_chakran
Builder

Hi,

I am using python scripting to connect with splunk and my python script automatically uploads new files added in a folder with same index. Now when i have to search for all files under same index, it's easy as "search index="testindex"
but if i want to only search within a specific file of same index i have to use search index="testindex" source=d:\\splunk\\file.csv.

Now when i am trying to implement this using python sdk, python automatically converts "\\"in to "\" and thus splunk does not give any result. Please help me what changes need to be done to fix this issue.

How can i add extra "\" in path of source or else how can the search query be parsed without extra "\" in source path.

0 Karma
1 Solution

Damien_Dallimor
Ultra Champion
source=d:\\\\splunk\\\\file.csv

View solution in original post

Damien_Dallimor
Ultra Champion
source=d:\\\\splunk\\\\file.csv
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...