All Apps and Add-ons

Wordcloud Custom Visualization : Stanza errors

Lucas_K
Motivator

This app seems to add lots of invalid stanzas to all user configurations.

ie. Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 953: display.visualizations.custom.wordcloud_app.wordcloud.useColors (value: 1).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 967: display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic (value: 0).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 968: display.visualizations.custom.wordcloud_app.wordcloud.useColors (value: 1).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 1051: display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic (value: 0).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 1052: display.visualizations.custom.wordcloud_app.wordcloud.useColors (value: 1).

There are thousands of these invalid stanzas as it infects every user and every app.

lqiao2
Path Finder

Hey, I had the same issue and followed @SK8 's suggestion. It works. Here is what I did:
1. created /opt/splunk/etc/apps/wordcloud_app/README/savedsearches.conf.spec
2. entered below contents:
[]
display.visualizations.custom.wordcloud_app.wordcloud.useColors =
display.visualizations.custom.wordcloud_app.wordcloud.alignmentMode =
display.visualizations.custom.wordcloud_app.wordcloud.backgroundColor =
display.visualizations.custom.wordcloud_app.wordcloud.colorBy =
display.visualizations.custom.wordcloud_app.wordcloud.colorMode =
display.visualizations.custom.wordcloud_app.wordcloud.numOfBins =
display.visualizations.custom.wordcloud_app.wordcloud.minColor =
display.visualizations.custom.wordcloud_app.wordcloud.maxColor =
display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic =
3. restart splunk

0 Karma

DalJeanis
Legend

@Lucas K - has this issue been resolved? (Also, have you notices @SK8's suggestion?)

0 Karma

Lucas_K
Motivator

We had to uninstall the app long prior to that answer.

0 Karma

niketn
Legend

@Lucas K , did you refer to the Tag Cloud examples in Splunk 6.x Dashboard Examples App? Are you using Tag Cloud visualization at all? If you are what is the alternative you used?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

SK8
Explorer

The app miss the README/savedsearches.conf.spec file.
- add the "README" directory in the main directory of the app ($SPLUNK_HOME$/etc/apps/wordcloud_app/README)
- add file savedsearches.conf.spec with following contens:

Declare properties here

display.visualizations.custom.wordcloud_app.wordcloud.useColors =
display.visualizations.custom.wordcloud_app.wordcloud.alignmentMode =
display.visualizations.custom.wordcloud_app.wordcloud.backgroundColor =
display.visualizations.custom.wordcloud_app.wordcloud.colorBy =
display.visualizations.custom.wordcloud_app.wordcloud.colorMode =
display.visualizations.custom.wordcloud_app.wordcloud.numOfBins =
display.visualizations.custom.wordcloud_app.wordcloud.minColor =
display.visualizations.custom.wordcloud_app.wordcloud.maxColor =
display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic =

  • restart splunk
0 Karma

Lucas_K
Motivator

so nothing?

I'll have to uninstall as this app as it still throws thousands of errors making troubleshooting startup impossible.

0 Karma

niketn
Legend

@Lucas K, have you checked out Tag Cloud examples in Splunk 6.x Dashboard Examples App?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...