Splunk Search

Python splunk-sdk vs Python requests library

DavidGuarneri
Path Finder

Is there any particular reason for using Python splunk-sdk over standard restful API libraries or tools (such as Python requests library)? Using standard Python, you should be able to import data into pandas with 3 lines:

 

response = requests.get(url)
data = response.json()
pd.DataFrame(data)

 

What does splunk-sdk have that Python requests does not?

 

Thanks!

0 Karma
1 Solution

livehybrid
SplunkTrust
SplunkTrust

Is your intention to query Splunk using some external python code, or are you building a Splunk add-on and using the inbuilt Splunk python?

You may gain some benefits from using the sdk if connecting to Splunk API from outside Splunk using the SDK, such as pagination, error catching, validation etc. It can also help abstract away from the particular API endpoints needed for interacting with the REST API and be maintained to reflect changes in Splunk through version updates to the SDK libraries.

Let me know if you have a particular use-case and we can see if there is a particular benefit/drawback to using the SDK and/or requests library.

Please let me know how you get on and consider accepting this answer or adding karma this answer if it has helped.
Regards

Will

View solution in original post

livehybrid
SplunkTrust
SplunkTrust

Is your intention to query Splunk using some external python code, or are you building a Splunk add-on and using the inbuilt Splunk python?

You may gain some benefits from using the sdk if connecting to Splunk API from outside Splunk using the SDK, such as pagination, error catching, validation etc. It can also help abstract away from the particular API endpoints needed for interacting with the REST API and be maintained to reflect changes in Splunk through version updates to the SDK libraries.

Let me know if you have a particular use-case and we can see if there is a particular benefit/drawback to using the SDK and/or requests library.

Please let me know how you get on and consider accepting this answer or adding karma this answer if it has helped.
Regards

Will

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Quantify Your Splunk Investment Impact: Introducing Savings Metrics to Value Insights

Building on the foundation established in our initial Value Insights releases, we are introducing the Savings ...

Event Series: Telemetry Pipeline Management

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...