All Apps and Add-ons

Manually input lookup data on server?

dewald13
Path Finder

Is there any way to manually input the library to do the lookup command? The network that I am trying to do this on is locked down and my Splunk server cannot hit the website to update the cache.

Any help will be greatly appreciated!

Tags (2)
0 Karma

dshpritz
SplunkTrust
SplunkTrust

This may not be just you. It looks like the user-agent-string.info site is down, which may be causing your problem.

As an alternative, I also have TA-browscap which has similar capabilities, but was more geared towards web analytics. It can be found here:

TA-browscap

It does allow (actually require) that you manually download the data file.

Thanks,

Dave

0 Karma

dshpritz
SplunkTrust
SplunkTrust

I'm afraid not. After the update script downloads the file from the user-agent-string.info site, it uses the pickle module to parse and the serialize the data to the cache file. Can you contact me (there is a contact link on the TA-uas_parser page) so I can get a better idea of your requirements?

Thanks,

Dave

0 Karma

dewald13
Path Finder

I dont even think we will be able to do that. Is there anywhere you know of the site I can download it from directly?

0 Karma

dshpritz
SplunkTrust
SplunkTrust

If you have a system which is not on a locked down network, you can run the "update_cache.py" script to download the data file. It will run the processing needed to create the cache file in the /bin/ua_cache/ directory. You can then copy the /bin/ua_cache/cache file to the locked down server for use. Let me know if that solution works for you.

Dave

0 Karma

dewald13
Path Finder

We are aware the site is having some issues but either way, we cannot get out of our network and hit it to download what is needed. Is there a way to accomplish this manually??

We have also looked at your TA-browscap app but that is not what we are looking for. We need to break down our user agent strings.

Please advise if there is a workaround.

thanks,
doug

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Build the Future of Agentic AI: Join the Splunk Agentic Ops Hackathon

AI is changing how teams investigate incidents, detect threats, automate workflows, and build intelligent ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...