All Apps and Add-ons

Wordcloud Custom Visualization : Stanza errors

Lucas_K
Motivator

This app seems to add lots of invalid stanzas to all user configurations.

ie. Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 953: display.visualizations.custom.wordcloud_app.wordcloud.useColors (value: 1).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 967: display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic (value: 0).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 968: display.visualizations.custom.wordcloud_app.wordcloud.useColors (value: 1).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 1051: display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic (value: 0).
Invalid key in stanza [blah] in /opt/splunk/etc/apps/blah/local/savedsearches.conf, line 1052: display.visualizations.custom.wordcloud_app.wordcloud.useColors (value: 1).

There are thousands of these invalid stanzas as it infects every user and every app.

lqiao2
Path Finder

Hey, I had the same issue and followed @SK8 's suggestion. It works. Here is what I did:
1. created /opt/splunk/etc/apps/wordcloud_app/README/savedsearches.conf.spec
2. entered below contents:
[]
display.visualizations.custom.wordcloud_app.wordcloud.useColors =
display.visualizations.custom.wordcloud_app.wordcloud.alignmentMode =
display.visualizations.custom.wordcloud_app.wordcloud.backgroundColor =
display.visualizations.custom.wordcloud_app.wordcloud.colorBy =
display.visualizations.custom.wordcloud_app.wordcloud.colorMode =
display.visualizations.custom.wordcloud_app.wordcloud.numOfBins =
display.visualizations.custom.wordcloud_app.wordcloud.minColor =
display.visualizations.custom.wordcloud_app.wordcloud.maxColor =
display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic =
3. restart splunk

0 Karma

DalJeanis
Legend

@Lucas K - has this issue been resolved? (Also, have you notices @SK8's suggestion?)

0 Karma

Lucas_K
Motivator

We had to uninstall the app long prior to that answer.

0 Karma

niketn
Legend

@Lucas K , did you refer to the Tag Cloud examples in Splunk 6.x Dashboard Examples App? Are you using Tag Cloud visualization at all? If you are what is the alternative you used?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

SK8
Explorer

The app miss the README/savedsearches.conf.spec file.
- add the "README" directory in the main directory of the app ($SPLUNK_HOME$/etc/apps/wordcloud_app/README)
- add file savedsearches.conf.spec with following contens:

Declare properties here

display.visualizations.custom.wordcloud_app.wordcloud.useColors =
display.visualizations.custom.wordcloud_app.wordcloud.alignmentMode =
display.visualizations.custom.wordcloud_app.wordcloud.backgroundColor =
display.visualizations.custom.wordcloud_app.wordcloud.colorBy =
display.visualizations.custom.wordcloud_app.wordcloud.colorMode =
display.visualizations.custom.wordcloud_app.wordcloud.numOfBins =
display.visualizations.custom.wordcloud_app.wordcloud.minColor =
display.visualizations.custom.wordcloud_app.wordcloud.maxColor =
display.visualizations.custom.wordcloud_app.wordcloud.splunkTastic =

  • restart splunk
0 Karma

Lucas_K
Motivator

so nothing?

I'll have to uninstall as this app as it still throws thousands of errors making troubleshooting startup impossible.

0 Karma

niketn
Legend

@Lucas K, have you checked out Tag Cloud examples in Splunk 6.x Dashboard Examples App?

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

Step into “Hunt the Insider: An Splunk ES Premier Mystery” to catch a cybercriminal ...

After a whole week of being on call, you fell asleep on your keyboard, and you hit a sequence of buttons that ...

SplunkTrust Application Period is Officially OPEN!

It's that time, folks! The application/nomination period for the 2026-2027 SplunkTrust is officially open. If ...