Splunk Dev

how can i retrieve the search URL and name of a scheduled search using Intersplunk?

awurster
Contributor

Previously, I was using CSV reader and alert scripts to process a saved search and export to a 3rd party tool (JIRA). The splunk "title" or "name" gets turned into an "issue summary".

My previous code looked like:

search_summary = sys.argv[4]
search_url = sys.argv[6]

Now, I'm trying to modify this into a search command using Intersplunk:

search_results, dummy_results, search_settings = splunk.Intersplunk.getOrganizedResults()

How can i retrieve the search's "name" and/or a URL pointing back to it?

dolivasoh
Contributor

These are all passed as arguments to a script when alerting. Try setting your saved search to alert and capture the arguments.

0 Karma
Get Updates on the Splunk Community!

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL

Splunk AI Assistant for SPL | Key Use Cases to Unlock the Power of SPL  The Splunk AI Assistant for SPL ...

Buttercup Games: Further Dashboarding Techniques (Part 5)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...

Customers Increasingly Choose Splunk for Observability

For the second year in a row, Splunk was recognized as a Leader in the 2024 Gartner® Magic Quadrant™ for ...