About alvaro_garcia

alvaro_garcia · ‎12-25-2017

ok, thanks right, I remove the !/usr/bin/env python

alvaro_garcia · ‎12-22-2017

!/usr/bin/env python import requests,sys,splunk.Intersplunk keywords, argvals = splunk.Intersplunk.getKeywordsAndOptions() try: head={"X-API-Key": "bca3cd217870968ddd4a6a2", "Content-Type": "application/xml"} url="https://mydomain/host" results = splunk.Intersplunk.getOrganizedResults() item = results[0] for a in item: AA = a['AA'] BB = a['tBB'] data2="<field1><field2>2</field2><field3>"+ AA +"</field3><field4>"+ BB +"</field4></field1>" r = requests.post(url, data=data2, headers=head) except Exception as e: splunk.Intersplunk.parseError(e)

alvaro_garcia · ‎12-22-2017

I am using r = requests.post(url, data=data2, headers=head), my data is in xml format

alvaro_garcia · ‎12-21-2017

Hi, the last question, ^_^ My query returns many result, I need to made a request for result. Thanks!

alvaro_garcia · ‎12-21-2017

harsmarvania57 post as answer, and I set as correct

alvaro_garcia · ‎12-21-2017

Hello, thanks work fine!! Thnks a lot. Only a appreciation I need to change except Exception, e: to except Exception as e:

alvaro_garcia · ‎12-20-2017

any update?

alvaro_garcia · ‎12-20-2017

I adapted my perl script to python: import requests,sys,splunk.Intersplunk keywords, argvals = splunk.Intersplunk.getKeywordsAndOptions() argument1 = argvals.get("field1") print argument1 url= "http://www.XXXXXcom/AAA.xml" headers = {'API-Key': 'f2c3a693esb2ad02f0f9e5b84413', 'Content-Type': 'application/xml'} data = "% (argument1)" r = requests.post(url, data=data, headers=headers) But my problem now is how to pass the value of search field to argument1, i tried: https://answers.splunk.com/answers/409554/how-to-pass-hostname-to-a-custom-alert-script.html and others. But I not an expert in python Thanks

alvaro_garcia · ‎12-19-2017

Hello Splunkers! I have a custom command, that execute a perl script with argument. Script.pl ////////////// !/usr/bin/perl use strict; use warnings; my $curlResponseCode = curl -v -H "Content-Type: application/xml" -X POST -H "X-X-API-Key: f2c3a693ef31HHHH7b2a294f0f9e5b84413" -d "<AAA><BBBB>AAA</BBBB><CCCC>50</CCCC><VVVV>$ARGV[0]</VVVV></AAAA>" "http://www.URL.com/test.xml" ; /////////////////////// Commands.conf [myscript] type=perl filename = script.pl This script writes in corporate web site information. I execute perl script.pl test, the script work fine. I use the following search: index=XXX | stats count by field1 | script myscript field1 I need the value of field1, no the string field1. I tried with ‘field1’, ‘$field1’ …. And any combination that I imagine Any idea? Thnks!

alvaro_garcia · ‎09-08-2016

Hello Splunkers, I have a similar problem, in my case I need to use a report, becouse my users dont have acces to the index, is there any way to use tokens or reports with tokens o dropdown menus? Is there any way to replace the thanks in advance

alvaro_garcia · ‎09-06-2016

Hello, I have the same problem with the lasts version (2.3.1) of lookup editor and with Splunk 6.4.1 I set the owner to “Nobody” but when I tried to opened, I only see "_key" column

alvaro_garcia · ‎06-09-2014

Hi, I am trying this app in a Splunk 6.1 version. The app works fine, but takes much time in the command.lookup (159 seconds for 1449 events) Is there any way to accelerate de process?

Posts	12
Solutions	0
Karma Given	2
Karma Received	2
Member Since	‎04-03-2014

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Custom command arguments

much time to get results

Re: Custom command arguments

Re: Custom command arguments

Re: Custom command arguments

Re: Custom command arguments

Re: Custom command arguments

Re: Custom command arguments

Re: How to pass hostname to a custom alert script?

Re: Custom command arguments

Custom command arguments

Re: Am I able to use tokens for a report selection...

Re: Why am I unable to edit my kvstore lookup with...

much time to get results