Dashboards & Visualizations

KVStore on remote server

dokaas_2
Communicator

So this is bugging me. I've got the following script in an HTML form in Splunk:

//
// Get the collection of indexes
var myindexes = service.indexes();

        // Get an index to send events to
        myindexes.fetch(function(err, myindexes) {
          var myindex = myindexes.item("main");

          // Submit an event to the index
          myindex.submitEvent("Case Opened - lit", {
              sourcetype: "notes"
          }, function(err, result, myindex) {
            console.log("Submitted event: ", result);
          });
        });

//

Which works. But, if I add a line to use a variable instead of a literal string such as:

//
// Get the collection of indexes
var myindexes = service.indexes();
var event = "Date=" + form_Date + ", BacklogID=" + form_BacklogID + ", evtID=" + form_evtID + ", Comments=" + form_Comments + ", Author=" + form_Author;

        // Get an index to send events to
        myindexes.fetch(function(err, myindexes) {
          var myindex = myindexes.item("main");

          // Submit an event to the index
          myindex.submitEvent(event, {
              sourcetype: "siem:alarm:notes"
          }, function(err, result, myindex) {
            console.log("Submitted event: ", result);
          });
        });

//

it doesn't give an error, but it doesn't add the record either. I've debugged and stepped into the code and the var event does have data, but nothing gets pushed to the index.

What gives? Anybody have an idea?

Tags (4)
0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...