Hi Ketaka! I would recommend creating custom search commands with the Splunk SDK for Python. The SDK contains all of the Python classes and templates that you need to build the command. For information about creating custom search commands with the Python SDK, please see http://dev.splunk.com/view/custom-spl/SP-CAAAFFT. These docs contain an overview of creating custom search commands as well as examples from the SDK. Please let me know if this helps! -Taylor ... View more

Thank you jkat54 ♦ ! We received the value in the following Python. import sys args = sys.argv print(args[0]) print(args[1]) ... View more

CSV files are output in a fixed form from other departments' systems. I'm trying to replace the file processing Excel with Splunk. I see, props.conf works only for indexed data.. It turns out that we need to think about different means. Thank you for your reply many times. (The following may be unnecessary content, sorry. The summary of what you want to do is to load three types of standard CSV files, and output one CSV file after processing. At that time, it is necessary to delete previous data and perform new processing. I think this process is not suitable for Splunk, which indexes and accumulates data.  If you look only at my work on the project, it may not be worthwhile to use Splunk. ... View more