Splunk Dev

Custom Python Command: Is there any way to retrieve "earliest and "latest" time range using intersplunk?

cschmidt_hurric
Path Finder

I'm writing a Python custom command that's generating, so it doesn't receive any events. Is there any way to retrieve "earliest" and "latest" using Intersplunk?

0 Karma

woodcock
Esteemed Legend

You need the addinfo command, like this:

... | addinfo
0 Karma

MuS
Legend

Sorry to be the bearer of bad news again; but this will not work.
He's trying the build a a Python custom command that's generating, so it doesn't receive any events. therefore the command will not be able to use info_min_time nor info_max_time.
It would work if the custom command gets some events by using splunk.Intersplunk.readResults.

0 Karma
Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...