Splunk Search

Possible to get information about user executing a custom command in Splunk from within the Python script?

rharrisssi
Path Finder

I have a custom script that I've defined as a command in commands.conf. I've tried adding passauth and enableheader, but I'm not seeing anything pertaining to the username of the Splunk user executing the command in Splunk in os.environ. Is there something I need to import and call to reveal this information?

[test]
type = python
filename = test.py
local = true
passauth = true
enableheader = true

0 Karma

ddrillic
Ultra Champion

A related discsiison at Permission to run custom command

Maybe running it via the script command can help... at script

0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...