Splunk Search

Test Splunk Queries

reesmanp
New Member

I am building a Splunk app for school and one of my requirements is to test that the queries sent to splunk work and are accurate. Is there a way to use unit testing on the queries themselves or should I just make a python script to parse the log files for the data that the query is supposed to gather and compare/contrast?

Tags (2)
0 Karma

michalsvorc
New Member

Sorry for necrobumping, but this thread has over 1K views and still no satisfactory answer. I wonder if someone did find some tool or could share how he resolved this issue.

Would be greatly appreciated by the whole community...

0 Karma

tbroberg
New Member
0 Karma

markthompson
Builder

I am not aware of one - if you can find one, please share.

You could always set up a test index and run it... But if not, your python script should do the trick

0 Karma

reesmanp
New Member

Thanks for that. I will see what I can find and let you know if I did find anything or just used a script.

0 Karma
Get Updates on the Splunk Community!

Preparing your Splunk Environment for OpenSSL3

The Splunk platform will transition to OpenSSL version 3 in a future release. Actions are required to prepare ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureThursday, March 27, 2025  |  11AM PST / 2PM EST | Register NowStep boldly ...

Splunk AppDynamics with Cisco Secure Application

Web applications unfortunately present a target rich environment for security vulnerabilities and attacks. ...