All Apps and Add-ons

Splunkit Firefox Requirement

reed_kelly
Contributor

Is it possible to create a search Grinder test that doesn't depend on Firefox? Can the Grinder search test be based on CLI searches instead?

We have only headless Linux servers with fairly tight controls. We don't even have access to an external yum repository, so each RPM has to be loaded by hand.

Tags (1)
0 Karma
1 Solution

schoi
Splunk Employee
Splunk Employee

The Search Test part of SplunkIt currently requires a browser (default Firefox), since we purposely wanted searches to go through SplunkWeb. However, if your use case is to run searches via CLI, then you'd need to write your own splunkit/user/search/ test which does not call SplunkItTest.java. It should be straight-forward to issue CLI commands (see splunkit/server/server.py for examples.)

We'll put the ability to run the Search Test via CLI on a future version of SplunkIt; in the meantime let me know if you need help on this sooner.

View solution in original post

0 Karma

schoi
Splunk Employee
Splunk Employee

The Search Test part of SplunkIt currently requires a browser (default Firefox), since we purposely wanted searches to go through SplunkWeb. However, if your use case is to run searches via CLI, then you'd need to write your own splunkit/user/search/ test which does not call SplunkItTest.java. It should be straight-forward to issue CLI commands (see splunkit/server/server.py for examples.)

We'll put the ability to run the Search Test via CLI on a future version of SplunkIt; in the meantime let me know if you need help on this sooner.

0 Karma

reed_kelly
Contributor

Thanks, schoi. I was able to get firefox installed and run the search test. Unfortunately, I couldn't find the results. I'll take this offline as I don't want to use the comments to debug something that is probably specific to my configuration.

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In December, the Splunk Threat Research Team had 1 release of new security content via the Enterprise Security ...

Why am I not seeing the finding in Splunk Enterprise Security Analyst Queue?

(This is the first of a series of 2 blogs). Splunk Enterprise Security is a fantastic tool that offers robust ...

Index This | What are the 12 Days of Splunk-mas?

December 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...