All Apps and Add-ons

Wordcloud Custom Visualization : Stanza errors

Lucas_K
Motivator

This app seems to add lots of invalid stanzas to all user configurations.

ie. Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 953: display.visualizations.custom.wordcloud_app.wordcloud.useColors (value: 1).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 967: display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic (value: 0).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 968: display.visualizations.custom.wordcloud_app.wordcloud.useColors (value: 1).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 1051: display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic (value: 0).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 1052: display.visualizations.custom.wordcloud_app.wordcloud.useColors (value: 1).

There are thousands of these invalid stanzas as it infects every user and every app.

lqiao2
Path Finder

Hey, I had the same issue and followed @SK8 's suggestion. It works. Here is what I did:
1. created /opt/splunk/etc/apps/wordcloud_app/README/savedsearches.conf.spec
2. entered below contents:
[]
display.visualizations.custom.wordcloud_app.wordcloud.useColors =
display.visualizations.custom.wordcloud_app.wordcloud.alignmentMode =
display.visualizations.custom.wordcloud_app.wordcloud.backgroundColor =
display.visualizations.custom.wordcloud_app.wordcloud.colorBy =
display.visualizations.custom.wordcloud_app.wordcloud.colorMode =
display.visualizations.custom.wordcloud_app.wordcloud.numOfBins =
display.visualizations.custom.wordcloud_app.wordcloud.minColor =
display.visualizations.custom.wordcloud_app.wordcloud.maxColor =
display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic =
3. restart splunk

0 Karma

DalJeanis
SplunkTrust
SplunkTrust

@Lucas K - has this issue been resolved? (Also, have you notices @SK8's suggestion?)

0 Karma

Lucas_K
Motivator

We had to uninstall the app long prior to that answer.

0 Karma

niketn
Legend

@Lucas K , did you refer to the Tag Cloud examples in Splunk 6.x Dashboard Examples App? Are you using Tag Cloud visualization at all? If you are what is the alternative you used?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

SK8
Explorer

The app miss the README/savedsearches.conf.spec file.
- add the "README" directory in the main directory of the app ($SPLUNK_HOME$/etc/apps/wordcloud_app/README)
- add file savedsearches.conf.spec with following contens:

Declare properties here

display.visualizations.custom.wordcloud_app.wordcloud.useColors =
display.visualizations.custom.wordcloud_app.wordcloud.alignmentMode =
display.visualizations.custom.wordcloud_app.wordcloud.backgroundColor =
display.visualizations.custom.wordcloud_app.wordcloud.colorBy =
display.visualizations.custom.wordcloud_app.wordcloud.colorMode =
display.visualizations.custom.wordcloud_app.wordcloud.numOfBins =
display.visualizations.custom.wordcloud_app.wordcloud.minColor =
display.visualizations.custom.wordcloud_app.wordcloud.maxColor =
display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic =

  • restart splunk
0 Karma

Lucas_K
Motivator

so nothing?

I'll have to uninstall as this app as it still throws thousands of errors making troubleshooting startup impossible.

0 Karma

niketn
Legend

@Lucas K, have you checked out Tag Cloud examples in Splunk 6.x Dashboard Examples App?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Get Updates on the Splunk Community!

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...

Security Newsletter Updates | March 2023

 March 2023 | Check out the latest and greatestUnify Your Security Operations with Splunk Mission Control The ...