Implementing Splunk 7, Third Edition - Third Edition

Using Google to generate results

External commands can also act as data generators, similar to the stats command that we used to create test events. There are a number of these commands, but let's try a fun example, Google (some organizations may not have an internet connection for use in your Splunk apps, but we'll assume you do have access for these examples). This command takes one argument, a search string, and returns the results as a set of events. Let's execute a search for Splunk:

|google "splunk" 

This produces a table, as shown in the following screenshot:

This example may not be terribly useful, but you can probably think of external ...