um did you have a look at http://www.jdbc4olap.org/ ? It should be possible using the DBX app ... View more

Yeah works but is no 100% clean. Still i can work on the usecase for now. Thanks! ... View more

Just place the class under /bin of your app ... View more

Glad it works for you. When its checked by Splunk you can look at what i used it for in https://splunkbase.splunk.com/app/3573/ 🙂 ... View more

actually i managed... will post it as a answer but it is hackish, you can exted the python path... 😕 ... View more

did you ever manager to get it to run? I need a ready made class and i can not load it inside my controller 😕 ... View more

Nope, not currently. Um, i never needed that but it would be possible to either do a custom command listing all files and modify the xls2csv to accept a prior search result with a list of paths/filenames and process them as a stream. ... View more

hm, yeah kinda look ok-ish. The idea was to work with a repository equaling an app and work directly with it in /etc/apps for instance. The general workflow is supposed to be 1. fork app from template in bitbucket 2. clone repo into /etc/apps (or /etc/deployment-apps or /etc/master-apps) on a development stage 3. edit the app, in the case of an ui app via splunk web-ui (power users) 4. merge changes, clean stuff in local 5. push changes into git 6. clone or update app into a production stage into the apropriate structure and refresh leading to usable app in ui or app being deployed via cluster or deployment method we keep a separate gitdir so there is no git cluter in the repo itself. Do i make sense? I guess i can do what you suggest and take the "detour" via /package of which i was not aware ... View more

ok, but this won't touch the app itself so i can not work with git directly etc. ... View more

open for pointers essentially i want to merge all changes by non admins with shell and vi 🙂 into the default ... View more

The idea is to merge UI generated changes back into default (on INTG), push it to the central git and then pull the repo version to a splunk PROD stage ( /etc/apps or /etc/deployment-apps or /etc/cluster-apps or whatever was the path again). Mostly for app maintainers updating searches and knowledge objects on the GUI with no shell access. I will update the question to clarify ... View more

so, 5 years later this still doesn't seem to work... any news? ... View more

to make it more precise: i would like to change the default stylesheet or something i.e. influence the colors Splunk uses unless you specify something in the xml of a dashboard etc. ... View more

Try https://splunkbase.splunk.com/app/2775/ it contains a more generic Splunk REST command 🙂 ... View more

oh wait, i downloaded the app and if i see it correctly then you only need to do this for the start date line 6: $date1 = Get-Date.AddHours(-1) if it runs hourly... no idea what the schedule is though ... ... View more

hi, did you ever get around to do it? The app is still version 1.0 so i guess it has not yet been updated? ... View more

That one certainly works for eDirectory - part of it was made for us 😉 ... View more