Splunk Dev

how can i retrieve the search URL and name of a scheduled search using Intersplunk?

awurster
Contributor

Previously, I was using CSV reader and alert scripts to process a saved search and export to a 3rd party tool (JIRA). The splunk "title" or "name" gets turned into an "issue summary".

My previous code looked like:

search_summary = sys.argv[4]
search_url = sys.argv[6]

Now, I'm trying to modify this into a search command using Intersplunk:

search_results, dummy_results, search_settings = splunk.Intersplunk.getOrganizedResults()

How can i retrieve the search's "name" and/or a URL pointing back to it?

dolivasoh
Contributor

These are all passed as arguments to a script when alerting. Try setting your saved search to alert and capture the arguments.

0 Karma
Get Updates on the Splunk Community!

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...

Secure Your Future: Mastering Upgrade Readiness for Splunk 10

Spotlight: The Splunk Health Assistant Add-On  The Splunk Health Assistant Add-On is your ultimate companion ...

Observability Unlocked: Kubernetes & Cloud Monitoring with Splunk IM

Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team on ...