Splunk Search

Why is there error when trying to get data from REST API using Python script?

munang
Path Finder

I'm trying to get data by registering it as a Splunk script using Python code.

But the problem only occurs when I run this code in Splunk.

When I run it directly in Splunk Python locally, there is no problem,

munang_0-1674139023005.png

 

but when I run it from Splunk, I get the following error.

munang_1-1674139051187.png

 

The error contents are as follows.

Failed to establish a new connection: [Errno 8] nodename nor servname provided, or not known

 

So I searched and tried using http scheme and requests.get(verift=false), but the same error occurs.

There is no error when I run it locally, so it seems to be a problem when sending a request from Splunk.

 

 

If anyone knows, I'd appreciate any help.

 

 

import requests as req
import json

def tmdb_api_call(requestURL, parameters):
    response = req.get(url=requestURL, params=parameters)
    if response.status_code != 200:
        print(response.json())
        exit()
    data = response.json()
    return json.dumps(data)


def get_upcoming_movies_by_page(api_key, page_number=1):
    requestURL = "http://api.themoviedb.org/3/movie/upcoming"
    parameters = {"api_key": api_key, "page": page_number}
    return tmdb_api_call(requestURL, parameters)


def main():
    api_key = "key"
    upcoming_movie_list = get_upcoming_movies_by_page(api_key, 1)
    data = json.loads(upcoming_movie_list)
    print(json.dumps(data["results"]))

main()

 

 

(code from https://github.com/siddharthajuprod07/youtube)

 

Labels (1)
0 Karma

munang
Path Finder

@PaulPanther 

Enter data from my local Splunk -> script
Invoke it using

This is a config file related to using the script.

my splunk inputs.conf setup 

[script://$SPLUNK_HOME/etc/apps/tmdb/bin/tmdb_upcoming.py]
disabled = false
host = MyComputer-MacBookAir.local
interval = 60.0
sourcetype = _json

 

Please reply if you have any other information.

0 Karma

PaulPanther
Motivator

@munang What is your setup in Splunk and how do you call the script?

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...