Hi,
I have a requirement of fetching data from static lookup within python code
i.e Query would be
| inputlookup xyz | fields f1,f2,f3
and thus using service.jobs.oneshot method as per python sdk
As soon as I use
job = service.jobs.oneshot("| inputlookup xyz | fields f1,f2,f3",**kwargs_oneshot)
it returns no results.
same splunk query works fine in normal search query windows (So nothing wrong with query as such) and same python code works fine if i use normal search query like
job = service.jobs.oneshot("search index=idx1 | fields f1,f2,f3",**kwargs_oneshot)
adding to that i found that if i remove search keyword from splunk search it returns no result, below query returns no result
job = service.jobs.oneshot("index=idx1 | fields f1,f2,f3",**kwargs_oneshot)
With this i feel there should be some specified search format which we should use in our inputlookup query within oneshot metho
Do anyone have any input about how to write inputlookup query in oneshot method
... View more