Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About Federica_92
Federica_92
Communicator
Member since:
12-22-2014
09-22-2020
Community Statistics
| Posts | 170 |
| Solutions | 2 |
| Karma Given | 11 |
| Karma Received | 9 |
| Member Since | 12-22-2014 |
Activity Feed
- Posted Minemeld python errors on All Apps and Add-ons. 09-22-2020 09:22 AM
- Karma Re: Should I use a heavy forwarder or light forwarder to send out Linux alerts to a Splunk indexer? for lguinn2. 06-05-2020 12:47 AM
- Karma Re: splunk db connector RPC server for Richfez. 06-05-2020 12:47 AM
- Karma Re: Can I rename different fields the same thing? for Runals. 06-05-2020 12:47 AM
- Karma Re: Can I rename different fields the same thing? for NOUMSSI. 06-05-2020 12:47 AM
- Karma Re: Can I rename different fields the same thing? for fdi01. 06-05-2020 12:47 AM
- Karma Re: Can I rename different fields the same thing? for stephane_cyrill. 06-05-2020 12:47 AM
- Karma Re: How to edit the syntax for my rex search to extract the folder name from a source path? for woodcock. 06-05-2020 12:47 AM
- Karma Re: How to edit my current rex search to extract path names? for woodcock. 06-05-2020 12:47 AM
- Karma Re: Why is my drop-down time token not working? for badrinath_itrs. 06-05-2020 12:47 AM
- Got Karma for Creating a python script that forwards data to Splunk, what library and function can I use to make this?. 06-05-2020 12:47 AM
- Got Karma for How to configure a deployment server?. 06-05-2020 12:47 AM
- Got Karma for Re: How to create a python script that generates an alert if the number of events returned from a search is 0?. 06-05-2020 12:47 AM
- Got Karma for Can I rename different fields the same thing?. 06-05-2020 12:47 AM
- Got Karma for Can I rename different fields the same thing?. 06-05-2020 12:47 AM
- Got Karma for How to write a search to display all names of lookup tables I have in Splunk?. 06-05-2020 12:47 AM
- Got Karma for How maintain a session variable using the nav bar. 06-05-2020 12:47 AM
- Got Karma for Is it possible to build a search head cluster with only 2 search heads and the master as a deployer?. 06-05-2020 12:47 AM
- Karma Re: Unexpected duplicate app: _cluster for phemmer. 06-05-2020 12:46 AM
- Karma Error with Splunk DB Connect plugin for ladwinster. 06-05-2020 12:46 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
03-20-2015
10:22 AM
Hi everyone,
I have a problem building an SPL query with the regular expression:
This is an example of my data:
These are all pathname
root/home/1/2/3/4/5/6/
root/home/1/2/3/4
root/home/0/9/11
root/home/0/9/22
and so on...
I would like edit my data in the base of one specific folder, so for example, if the folder is 2, I would like to obtain:
root/home/1/*
root/home/1/*
root/home/0/9/11
root/home/0/9/22
If the folder was home my data are:
root/*
Actually, all my pathname are raw data, so to extract them I use this search, that's work fine:
index=main | rex "\\s\\-\\s\\[(?<path_d>.+)\]" | fields path_d
How can I create a new search, using the results of this previous search, that do what I have ask before?
Please, let me know.
... View more
03-20-2015
07:14 AM
" using the splunk framework"....
... View more
03-20-2015
02:17 AM
I have done a spelling mistake writing here, but in the code is correct, the name of the token is always the same per recurrence.
How can I solve this?
... View more
03-19-2015
04:20 AM
I mean, if I use $radiougroup$ before of the pipe " | " My query read the value of the token, instead if I use the pipe, and next eval, my query doesn't recognize it.
I have tried to add this part :
{tokens: true, tokenNamespace: "submitted"}
Based of the submitted models, but still doesn't work
... View more
03-18-2015
04:02 AM
Sorry, you are right, I have correct the syntax, but I have still the same problem, I have got that I cannot use :
| eval output=$radiogroup$
So, I cannot use the tokensafe in the second part of the query but I don't understand the reason.
Let me know, if you will have any ideas, thank you
... View more
03-16-2015
07:36 AM
Hi everyone, I'm trying to do a query using eval, and a token value:
....
var id = $(cb).attr('id');
tokens.set("mytoken", id);
But the query is not working, if instead of write "mytoken" in the eval condition, I write it at the place of the * the query works. Any suggestion?
var SearchManager_button = require("splunkjs/mvc/searchmanager");
new SearchManager_button({
id: "mysearch-button",
search: mvc.tokenSafe ("*| eval output=$mytoken$ | fields output |outputlookup wildcard_read.csv")
});
... View more
03-13-2015
04:45 AM
How can I use the checkbox group to set the parameters for a search?
For example:
var CheckboxGroupView = require("splunkjs/mvc/checkboxgroupview");
new CheckboxGroupView({
id: "example-checkboxgroup",
default: "One",
el: $("#divToHangOn")
}).render();
var checkbox[n] = $("#checkbox_id").val()
var SearchManager = require("splunkjs/mvc/searchmanager");
new SearchManager({
id: "search",
search: "index=main source=checkbox[1] sourcetype=[2] and so on...until n",
});
... View more
03-11-2015
10:16 AM
Hi everyone,
Can I open a file from the splunk framework, a txt file, and write on it?
Thank you,
... View more
- Tags:
- file
- txt
- webframework
03-09-2015
08:47 AM
I'm working of something of very similar, only using javascript, any luck with that?
... View more
03-09-2015
05:35 AM
Sorry, I'm a kind of idiot! I have got it now, thank you so much
... View more
03-09-2015
04:04 AM
The minimum free disk space (20000MB) reached for /opt/splunk/var/run/splunk/dispatch.
I have no idea why.
... View more
03-09-2015
03:44 AM
I have this problem:
The minimum free disk space (5000MB) reached for /opt/splunk/var/run/splunk/dispatch.
So I cannot delete my data because splunk is full, I have tried to digit from command line :
./splunk clean eventdata -f
and I have tried to erase all my log from the splunk folder, but I have still the same problem.
Please can someone help me?
... View more
03-06-2015
03:32 AM
SPL, yes in all in one html page
... View more
03-06-2015
03:24 AM
Thank you for your reply, how can I use numrows to save the number of line and use the value for an if condition?
... View more
03-06-2015
01:52 AM
Hi everyone,
How can I check if one query in my home.html page, created using the splunk framework, has produced results or not?
I would like do something like:
results_query=something
If results_query>0
print results
else
print "there are no results"
... View more
03-06-2015
01:41 AM
Yes, sorry, in the end I have solve that I can not use the safe taken in the sub search
... View more
03-03-2015
06:47 AM
Please, could someone tell me what's wrong in this?
{% dropdown id="drop-list2" managerid="mysearch" default=" " labelField="dad" valueField="dad" value="$dad$"|token_safe %}
new SearchManager_send({
id: "mysearch-tree-send",
searchname: "mysearch-tree-send",
search: mvc.tokenSafe ("host=path | rex \"\,(?<child>.+)\:\" | search child=$dad$ | table child ")
});
my variable $dad$ is always empty
... View more
03-03-2015
02:21 AM
Hi, I'm trying to execute a search in the django and get the results in the views.py, Is possible?
... View more
03-02-2015
06:21 AM
Ok, I think I got the problem, I'm going to try to extract the field path with the rex epression, Now I try
... View more
03-02-2015
06:18 AM
As well I have tried with labelField="path"
... View more
03-02-2015
06:16 AM
search:("host=path sourcetype=__singleline source=http-stream earliest=-10m | fields path") all my host, so
{% dropdown id="drop-list2" managerid="mysearch-tree-exec-d" default=" " labelField="host" valueField="host" value="$path$"|token_safe %}
But doesn't work
... View more
03-02-2015
06:09 AM
Thank you, in my first case works, in my second one not:
{% dropdown id="drop-list2" managerid="mysearch-tree-exec-d" default=" " labelField="source" valueField="source" value="$path$"|token_safe %}
any ideas?
... View more
03-02-2015
04:00 AM
Hi everyone,
I'm trying with the splunk framework to take results from a search and show them on a drop-down menu. I have two examples, but both of them don't work and produce the same errors. I have tested the search in the Search and Reporting App and they produce a single result for each event.
The error is: "Duplicate labels causing conflict"
example 1:
My code is very simple:
This is what there is in the block section:
{% dropdown id="drop-list1" managerid="mysearch-tree-exec-d" default=" " value="$path$"|token_safe %}
And this is the code in the js section:
new SearchManager_tree_e_d({
id: "mysearch-tree-exec-d",
search:("host=path sourcetype=__singleline source=http-stream earliest=-10m")
});
example 2:
{% dropdown id="drop-list2" managerid="mysearch-log" default=" " value="$sourcename$"|token_safe %}
new SearchManager({
id: "mysearch-log",
search: "index=main source=* | dedup source | fields source"
}); take all the different source
please, could someone help me?
... View more
02-27-2015
01:28 AM
Yeah, I have look at this, but it' s not what I'm trying to do : ( and furthermore splunk framework kick my ass every five minutes for every type of error that is not an error, but for him, is an error.
... View more
02-26-2015
01:13 AM
Good morning : ) Don't worry, I'm newbie too.
I have open and loop the file, but I have still some problem.
My template ask me to choose an option from a dropdown menu, when you select the option, it generate a external lookuptable and my views.py edit it.
The problem is that the view, try to make this before that I choose my option in the template, so I would like insert an if condition before the render_to(..) to be sure that this is execute only AFTER the selection in the dropdown menu.
And my second problem is that the views open the csv file (lookuptable) But I had change the permission of the file. I would like that the file that splunk generate are accessible to everyone, or at least, at my script.
Have you solve the yesterday's problem?
Please, let me know,
thank you!
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
09-22-2020
12:43 PM
|
