Splunk Search

R Project: How do I use commands involving paths with R language in Splunk?

dkoops
Path Finder

I want to use R to train a machine learning model, export it using saveRDS(), and then importing it again within Splunk using readRDS().
The problem is, I keep getting errors when trying to specify the path. This happens for any command involving paths; setwd, write.csv, etc.

Errors are similar:

command="r", R exited with code 1: Error: unexpected '/' in: " setwd(/" Execution halted

It probably has to do something with escaping the slashes, but any combination/amount of backslashes results in the same error..

Tags (3)
1 Solution

dkoops
Path Finder

Thanks for taking the time to look into my question, but it seems I figured it out. I was trying to do the following:

| r "
net = readRDS("C:\\User\\Documents\\R\\object.rds")
"

It went wrong with the double quotes within the double quotes; replacing all double quotes used in the R language with single quotes did (part of) the trick. (I should have been able to figure that out quicker, shame on me..)

It resulted in the following error however:

command="r", R exited with code 1: Error: '\U' used without hex digits in character string starting "'C:\U" Execution halted

It seems you also have to escape backslashes thrice for it to work (i'm guessing once for Splunk once for R?) Thus the working code being:

| r "
net = readRDS('C:\\\User\\\Documents\\\R\\\object.rds')
"

View solution in original post

0 Karma

dkoops
Path Finder

Thanks for taking the time to look into my question, but it seems I figured it out. I was trying to do the following:

| r "
net = readRDS("C:\\User\\Documents\\R\\object.rds")
"

It went wrong with the double quotes within the double quotes; replacing all double quotes used in the R language with single quotes did (part of) the trick. (I should have been able to figure that out quicker, shame on me..)

It resulted in the following error however:

command="r", R exited with code 1: Error: '\U' used without hex digits in character string starting "'C:\U" Execution halted

It seems you also have to escape backslashes thrice for it to work (i'm guessing once for Splunk once for R?) Thus the working code being:

| r "
net = readRDS('C:\\\User\\\Documents\\\R\\\object.rds')
"
0 Karma

lguinn2
Legend

Thanks for posting the error, but can you post the command string that generated the error?

0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...