Updating Splunk ServerClass Whitelist

joseph_caraccio — Tue, 02 Aug 2016 19:02:35 GMT

Hey Everyone,

Pretty sure this is a relatively easy problem to solve.. and it just has to do with my lack of REST knowledge.
Simply trying to update a list of server classes using this command

*curl -k -u {username}:{password} {url} -dwhitelist.0=server1 -dwhitelist.1=server2 -dwhitelist.3=server3 -dwhitelist.4=server4 -dwhitelist.5=server5 -dwhitelist.6=server6 -dwhitelist7=server7 -dwhitelist.8=server8 -dwhitelist.9=server9 -dwhitelist.10=server10 *

the problem with this command is that it takes what I set at whitelist.10 and puts in in between whitelist.1 and whitelist.3. I am guessing it just simply reads the first character of the server1 and places it there.

So I guess a simplified question is there some sort of end character for -dwhitelist.10 so that it ends up after whitelist.9?

Right now the order would be:
server1
server2
server10
server3
server4
server5
server6
server7
server8
server9

Re: Updating Splunk ServerClass Whitelist

jeremiahc4 — Tue, 02 Aug 2016 20:09:29 GMT

The whitelist ordering is not numeric so whitelist10 comes before whitelist2 (which you are missing in your problem statement).

Re: Updating Splunk ServerClass Whitelist

jeremiahc4 — Tue, 02 Aug 2016 20:10:23 GMT

it's sorted off the whitelist, not the servername

topic Re: Updating Splunk ServerClass Whitelist in Getting Data In

Updating Splunk ServerClass Whitelist

Re: Updating Splunk ServerClass Whitelist

Re: Updating Splunk ServerClass Whitelist