The venerable old-skool Splunk forums are now closed. Feel free to search for old content here, but new posts are no longer supported.

Instead, please visit the thriving community at answers.splunk.com to ask and answer questions about your Splunk deployment and how to get the most out of it.

Forums: SplunkAdministration: Python script for dnslookup.

Previous Topic: splunkweb fails to start  |   Next Topic: Splunk stays in loading status forever


Posts 1–3 of 3
1
posted by: donypie  |  posts
date: November 26, 2009
permalink

Hi all,

I would like to use the python dnslookup.py script as indicated in the Splunk doc
external_cmd = dnslookup.py host ip
to resolve ip address in the search apps. but I don't find the script on the Splunk forum and on the net.

Has anyone already coded this script ? If yes, would you like to share your code ?

Thanks a lot.
Best regards,
Pierre.

2
posted by: markpalmer  |  posts
date: February 2, 2010
permalink

Not certain, but I have been using external_lookup.py

I am trying to get this to lookup dst ip addresses but not having too much success. I got it to lookup LAN host names. Do you have to create a CSV file in order for this to work?

3
posted by: cpeper  |  posts
date: November 25, 2010
permalink

I have a similar issue...
I just installed splunk 4.1.5 two days ago, but there doesn't seem a script like this available in the installation. Neither in etc/apps/search/bin nor in etc/searchscripts