Getting Data In

Updating Splunk ServerClass Whitelist

joseph_caraccio
Engager

Hey Everyone,

Pretty sure this is a relatively easy problem to solve.. and it just has to do with my lack of REST knowledge.
Simply trying to update a list of server classes using this command

*curl -k -u {username}:{password} {url} -dwhitelist.0=server1 -dwhitelist.1=server2 -dwhitelist.3=server3 -dwhitelist.4=server4 -dwhitelist.5=server5 -dwhitelist.6=server6 -dwhitelist7=server7 -dwhitelist.8=server8 -dwhitelist.9=server9 -dwhitelist.10=server10 *

the problem with this command is that it takes what I set at whitelist.10 and puts in in between whitelist.1 and whitelist.3. I am guessing it just simply reads the first character of the server1 and places it there.

So I guess a simplified question is there some sort of end character for -dwhitelist.10 so that it ends up after whitelist.9?

Right now the order would be:
server1
server2
server10
server3
server4
server5
server6
server7
server8
server9

0 Karma

jeremiahc4
Builder

The whitelist ordering is not numeric so whitelist10 comes before whitelist2 (which you are missing in your problem statement).

0 Karma

jeremiahc4
Builder

it's sorted off the whitelist, not the servername

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Build the Future of Agentic AI: Join the Splunk Agentic Ops Hackathon

AI is changing how teams investigate incidents, detect threats, automate workflows, and build intelligent ...

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...