Splunk Dev

Help with Python applications to programmatically interact with the Splunk engine

unnatiShukla
New Member

How can I write Python applications to programmatically interact with the Splunk engine. I am new to Splunk, can anyone please help me with the same. I have basic understanding with splunk queries etc. But quite new to built an apploication that interacts with Splunk engine.

Tags (2)
0 Karma

satishsdange
Builder

Splunk is a single piece of software for data collection, reporting & parsing. You can use the same binary to access core Splunk i.e. Use Search Head(s) to access Indexer(s).
Is there any specific requirement/need, you want to build a separate application using Python?

0 Karma

Damien_Dallimor
Ultra Champion

Start here with our Splunk Python SDK , there are loads of examples to get you started !

0 Karma

KenWhitesell
Path Finder

Generally speaking, programs written to access the Splunk engine are written to interact through the Splunk REST API.

There's plenty of information here regarding the API. A good place to start is
link text http://docs.splunk.com/Documentation/Splunk/6.1.3/Overview/Extending

Working directly with the REST API is possible, and sometimes the only way to accomplish certain tasks. But there are also a set of SDKs available that encapsulate a lot of the more intricate parts, making it easy to perform common functions.

Again, there's plenty of information on this site. A good place to start for the SDKs would be:
link text http://docs.splunk.com/Documentation/Splunk/6.1.3/AdvancedDev/SplunkSDKs

Finally, Splunk does offer specific SDK training. I just took the class almost a month ago and found it to be invaluable.
link text http://www.splunk.com/view/SP-CAAAHSH

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...