Splunk Search

Why is there error when trying to get data from REST API using Python script?

munang
Path Finder

I'm trying to get data by registering it as a Splunk script using Python code.

But the problem only occurs when I run this code in Splunk.

When I run it directly in Splunk Python locally, there is no problem,

munang_0-1674139023005.png

 

but when I run it from Splunk, I get the following error.

munang_1-1674139051187.png

 

The error contents are as follows.

Failed to establish a new connection: [Errno 8] nodename nor servname provided, or not known

 

So I searched and tried using http scheme and requests.get(verift=false), but the same error occurs.

There is no error when I run it locally, so it seems to be a problem when sending a request from Splunk.

 

 

If anyone knows, I'd appreciate any help.

 

 

import requests as req
import json

def tmdb_api_call(requestURL, parameters):
    response = req.get(url=requestURL, params=parameters)
    if response.status_code != 200:
        print(response.json())
        exit()
    data = response.json()
    return json.dumps(data)


def get_upcoming_movies_by_page(api_key, page_number=1):
    requestURL = "http://api.themoviedb.org/3/movie/upcoming"
    parameters = {"api_key": api_key, "page": page_number}
    return tmdb_api_call(requestURL, parameters)


def main():
    api_key = "key"
    upcoming_movie_list = get_upcoming_movies_by_page(api_key, 1)
    data = json.loads(upcoming_movie_list)
    print(json.dumps(data["results"]))

main()

 

 

(code from https://github.com/siddharthajuprod07/youtube)

 

0 Karma

munang
Path Finder

@PaulPanther 

Enter data from my local Splunk -> script
Invoke it using

This is a config file related to using the script.

my splunk inputs.conf setup 

[script://$SPLUNK_HOME/etc/apps/tmdb/bin/tmdb_upcoming.py]
disabled = false
host = MyComputer-MacBookAir.local
interval = 60.0
sourcetype = _json

 

Please reply if you have any other information.

0 Karma

PaulPanther
Motivator

@munang What is your setup in Splunk and how do you call the script?

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...