The examples for RProject App are not working

[radhikabhagavat]

The examples for RProject App are not working. In fact I see issues with any command using input from the Splunk and passed on to R like:

index=test field1=somevalue| r "output<-summary(input)"

As mentioned above, Splunk->R flow is not working.

However I am able to read an external csv through this app in r command and display the output in Splunk. So R-> Splunk flow is working

Please help as I need to apply R functions on indexed data in Splunk as per my project requirements. Thanks.

[krwinters11]

I don't know if this will solve all of your problems, but there should be an = instead of <- in between output and summary.

[krwinters11]

you will also probably need to call the source file. The format I use works and looks like this:
... | r "
source('sourceFile.r') 
output = data.frame(functionName(input))
"

And apparently separate lines are very important. If will fail it if it is all on one line...not sure why (@rfujara_splunk)

[radhikabhagavat]

Thanks for responding back.

The example queries are already using = and not <- and no script file yet.

[rfujara_splunk]

Is there any error message? Why exactly happens?

[radhikabhagavat]

Sorry for delay in replying :

I see the following error:

index=_internal | head 1000 | table source | r "output=summary(input)"

command="r", R exited with code 1: Error: unexpected input in: "library = new_library input <- read.csv( "c:\windows\temp\tmpwa3cgd" , C:\" Execution halted