Hi, And thanks for you reply. This was one of the parameters that i have been testing out, but to no luck.
I tried to make my test case more simple.
import sys
import os
import six
import json
import time
import datetime
#import splunklib.client as client
# import splunklib
from splunklib.modularinput import Script, Scheme, Argument, EventWriter, Event
FUNCTION_NAME = "testModularInput"
class testModularInput(Script):
""" Class for importing jira data
"""
def get_scheme(self):
scheme = Scheme(self.__class__.__name__)
scheme.description = self.__class__.__name__
scheme.use_external_validation = False
scheme.use_single_instance = True
scheme.streaming_mode = Scheme.streaming_mode_xml
username_arg = Argument(
name="username",
title="User name",
data_type=Argument.data_type_string,
required_on_create=True,
required_on_edit=True
)
scheme.add_argument(username_arg)
return scheme
def validate_input(self, validation_definition):
return None
def stream_events(self, inputs, ew):
for input_name, input_item in inputs.inputs.items():
event = Event()
event.stanza = input_name
event.time = datetime.datetime.now().isoformat()+"+0200"
event.data = "test input of date"
event.index = "main"
ew.write_event(event)
return None
if __name__ == "__main__":
instance = testModularInput()
if len(sys.argv) > 1:
if sys.argv[1] == "--scheme":
instance.get_scheme()
elif sys.argv[1] == "--validate-arguments":
instance.validate_input()
else:
instance.usage()
pass
else:
instance.run(sys.argv)
sys.exit(0)
result in Splunk ( i have added dash to ensure that the xml is not hidden.
<stream>
<event stanza="testModularInput://testDebug" unbroken="1">
<time>2018-10-23T08:30:03.869000+0200</time>
<index>main</index>
<data>test input of date</data>
<done />
</event>
</stream>
... View more