Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Splunk REST api to retrieve proper JSON using Python

$
0
0
Team I am able to make a POST call to export end point and getting the search results. I am using Python requests library. The result is not in proper Json. It returns multiple JSON with preview object. I would like to know how to avoid "preview" to be returned from the response. OR how to overcome the below error? I guess the error is due to the response not in proper Json format. Appreciate any pointers. Thanks Here is the ***code snippet.*** *response = requests.post(URL, data=xxxx, headers=headers,verify=False) print("Status = "+str(response.status_code) ) print("response text = "+str(response.text)) json_data = json.loads(str(r.text))* **Sample output** response text = {"preview":true,"offset":0,"lastrow":true,"result":{"_time":"2019-10-09 21:12:00.131 UTC","event_guid":"xxxxxxx","event_category":"WEB","event_workflow":"xxxxx","event_subcategory":"xxxxx"}} {"preview":true,"offset":0,"lastrow":true,"result":{"_time":"2019-10-09 21:36:06.752 UTC","event_guid":"xxxxxxx-","event_category":"WEB","event_workflow":"xxxxx","event_subcategory":"xxxx"}} {"preview":false,"offset":0,"result":{"_time":"2019-10-09 21:12:00.131 UTC","event_guid":"xxxx-","event_category":"WEB","event_workflow":"xxxx","event_subcategory":"xxxxx"}} and so on.. The last command json.loads gives the below error: I tried without str(). still not working. **Extra data: line 2 column 1 (char 219)**

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>