Splunk Search

Possible to get information about user executing a custom command in Splunk from within the Python script?

rharrisssi
Path Finder

I have a custom script that I've defined as a command in commands.conf. I've tried adding passauth and enableheader, but I'm not seeing anything pertaining to the username of the Splunk user executing the command in Splunk in os.environ. Is there something I need to import and call to reveal this information?

[test]
type = python
filename = test.py
local = true
passauth = true
enableheader = true

0 Karma

ddrillic
Ultra Champion

A related discsiison at Permission to run custom command

Maybe running it via the script command can help... at script

0 Karma
Get Updates on the Splunk Community!

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...

Tech Talk | One Log to Rule Them All

One log to rule them all: how you can centralize your troubleshooting with Splunk logs We know how important ...

Splunk Security Content for Threat Detection & Response, Q1 Roundup

Join Principal Threat Researcher, Michael Haag, as he walks through: An introduction to the Splunk Threat ...