All Apps and Add-ons

Props / Transforms issue with File/Directory Information Input app

scannon4
Communicator

We have the File/Directory Information input app installed in our environment. We are seeing this warning in splunkd.log:

Invalid key-value parser, ignoring it, transform_name='kv-extraction-for-types'

I looked at props and it is looking for:
REPORT-0-kv-extraction-for-types = kv-extraction-for-types

In transforms, there is no matching entry. The closest one is called [kv-extraction-for-ace-types].

I assume this was just a typo of some sort but I wanted to bring it to the attention of the developer of the app, LukeMerphey.

0 Karma

LukeMurphey
Champion

Good find. This indeed looks like a bug. I opened a ticket to get this resolved and am planning to fix this in a maintenance release (1.3.1). See ticket 2278 for details.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...