Splunk Search

Is splunklib api code portable to splunk-sdk

DavidGuarneri
Path Finder

How much syntax has changed from splunklib (which ran on Python 2.x) to splunk-sdk (which runs on Python 3.x)? Just seems like a lot of the tutorials and info on Splunk API is super outdated. Is nobody doing this anymore? Currently mainly interested in running a search and getting results into Pandas using Python. Also breaking up a search into multiple smaller time spans if the time period is too long and/or the return data set too large.

 

I have old code from the splunklib Python 2.0 days but basically just starting over and using it as reference.

 

0 Karma

DavidGuarneri
Path Finder

I've given up. I don't know if it's a network issue on my side or what, but I'm just going to use standard Restful API libraries. All the samples around splunk-sdk that I could find seem out of date and I'm concerned about long-term support.

0 Karma
Get Updates on the Splunk Community!

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...