Splunk Python Connector

Connecting to Splunk with Python

CData Python Connectors leverage the Database API (DB-API) interface to make it easy to work with Splunk from a wide range of standard Python data tools. Connecting to and working with your data in Python follows a basic pattern, regardless of data source:

• Configure the connection properties to Splunk
• Query Splunk to retrieve or update data
• Connect your Splunk data with Python data tools.

Connecting to Splunk in Python

To connect to your data from Python, import the extension and create a connection:

import cdata.splunk as mod
conn = mod.connect("[email protected]; Password=password;")

#Create cursor and iterate over results
cur = conn.cursor()
cur.execute("SELECT * FROM Datamodels")
 
rs = cur.fetchall()
 
for row in rs:
print(row)

Once you import the extension, you can work with all of your enterprise data using the python modules and toolkits that you already know and love, quickly building apps that help you drive business.

Visualize Splunk Data with pandas

The data-centric interfaces of the Splunk Python Connector make it easy to integrate with popular tools like pandas and SQLAlchemy to visualize data in real-time.

engine = create_engine("splunk///Password=password&User=user")

df = pandas.read_sql("SELECT * FROM Datamodels", engine)

df.plot()
plt.show()

More Than Read-Only: Full Update/CRUD Support

Splunk Connector goes beyond read-only functionality to deliver full support for Create, Read Update, and Delete operations (CRUD). Your end-users can interact with the data presented by the Splunk Connector as easily as interacting with a database table.