topic Re: How to update browsercaps file for TA-browscap? in All Apps and Add-ons

How to update browsercaps file for TA-browscap?

jonhughes — Tue, 04 Feb 2014 05:02:10 GMT

I installed TA-browscap and have it working OK, but it seems that the browscap.csv file that the README says to download is a bit out of date - it doesn't seem to recognise IE 11 for example.

I tried downloading what I think is a newer version of the same format file (from browscap.org) but after restarting splunk, any search that I do involving the lookup fails with the error message Script for lookup table 'browscap_lookup' returned with error code 1. Results may be incorrect.

I tried to look into the source code to see if it was a simple problem to fix but I don't know python and I haven't been able to get anywhere.

Are there any simple edits I can make either to the Python source code or the csv file in order to make it work?

Re: How to update browsercaps file for TA-browscap?

dshpritz — Tue, 04 Feb 2014 07:08:14 GMT

Hey jonhughes,

It appears there was a change in the file format. The module I had been using needed, what turned out, to be a quick fix. I just uploaded v1.2 to Spunkbase, which may take a bit to populate. This version should work with the newer versions of the CSV files.

Thanks,

Dave

Re: How to update browsercaps file for TA-browscap?

jonhughes — Tue, 04 Feb 2014 07:30:57 GMT

perfect, thanks!

Re: How to update browsercaps file for TA-browscap?

GreyGryffin — Tue, 18 Feb 2014 22:20:06 GMT

I also note that there is a new download URL required.

See the release notes for TA_browscap (http://apps.splunk.com/app/1021/#) or visit http://browscap.org/ and reference the "Important Informaion" section. Old site URL is terminating 4/30/2014.

Re: How to update browsercaps file for TA-browscap?

cluettr — Sat, 10 May 2014 04:25:01 GMT

got the same error. doesn't work for me.

robbie

Re: How to update browsercaps file for TA-browscap?

bruceclarke — Fri, 16 May 2014 13:24:12 GMT

Hey Dave,

Do you have any update on getting browscap compatible with 6.1? Seems like it stopped working after the update. As a short term fix, we're using a macro to determine browser type, et al. Just curious if this is being looked into.

Thanks,
Bruce

Re: How to update browsercaps file for TA-browscap?

dshpritz — Fri, 16 May 2014 16:26:34 GMT

Hey Bruce,

I haven't tested it with 6.1.1 yet. I'll give a shot and update when complete. It will hopefully be by the end of next week.

Dave

Re: How to update browsercaps file for TA-browscap?

anandhim — Fri, 08 Aug 2014 13:50:16 GMT

Hey Dave,

Any updates? We tried with 6.1.2 and it's not working.
Thanks

Re: How to update browsercaps file for TA-browscap?

dshpritz — Fri, 08 Aug 2014 13:58:49 GMT

Please see: http://answers.splunk.com/answers/135078/browscap-ta-not-working-in-61/136751 There is a bug/feature in 6.1 that causes the default TA-browscap to break. I have a workaround, until Splunk replies to the ticket I have open to confirm.

Re: How to update browsercaps file for TA-browscap?

cgbsplunk — Tue, 17 Jul 2018 16:15:16 GMT

I tried updating browsecap file to csv file from browscap.org but I get the same error below. I can see the file format is different from the last one but in the TA-browscap ver 1.2 it says it was modified to accept the new format. Is there something else in settings I need to set so it knows it is the new format? I checked Splunk settings to make sure I am on ver 1.2 of TA-browscap.

Script for lookup table 'browscap_lookup' returned with error code 1. Results may be incorrect.