I tried the command below as suggested from the documentation page, however, an error was prompted. Any ideas?
D:\Program Files\Splunk\etc\apps\TA-uas_parser\bin>"D:\Program Files\Splunk\"bin \splunk cmd python update_cache.py Traceback (most recent call last): File "update_cache.py", line 4, in results = uas_parser.updateData() File "D:\Program Files\Splunk\etc\apps\TA-uas_parser\bin\uasparser.py", line 2 65, in updateData raise UASException("Failed to get version of lastest data") uasparser.UASException: Failed to get version of lastest data
The data source in question went subscription based and changed the URL.
Updatecache looks for a version number at: http://user-agent-string.info/rpc/getdata.php?key=free&format=ini&ver=y however, that now returns:
ERROR 404 - These data are not longer available on user-agent-string.info, please look at http://udger.com/resources/download
Once you purchase a subscription, you would need to modify the URLs in the uasparser.py file according to: