Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About Rocket66
Rocket66
Communicator
Member since:
02-21-2013
06-05-2020
Community Statistics
| Posts | 54 |
| Solutions | 6 |
| Karma Given | 6 |
| Karma Received | 31 |
| Member Since | 02-21-2013 |
Activity Feed
- Got Karma for Re: Unknown search command - custon python script. 09-10-2021 11:22 AM
- Karma Re: Why can't I bump Splunk using https:///en-US/_bump and get error message "Forbidden"? for jeffland. 06-05-2020 12:48 AM
- Got Karma for Re: Why can't I bump Splunk using https:///en-US/_bump and get error message "Forbidden"?. 06-05-2020 12:48 AM
- Got Karma for Re: How to delete a rendered SplunkJS view?. 06-05-2020 12:48 AM
- Got Karma for Re: 6.2 Forwarder Configuration on Linux: Why am I getting error "TcpInputProc - Message rejected. Received unexpected 369295616 byte message!" in server's splunkd.log?. 06-05-2020 12:47 AM
- Got Karma for Re: 6.2 Forwarder Configuration on Linux: Why am I getting error "TcpInputProc - Message rejected. Received unexpected 369295616 byte message!" in server's splunkd.log?. 06-05-2020 12:47 AM
- Got Karma for Re: 6.2 Forwarder Configuration on Linux: Why am I getting error "TcpInputProc - Message rejected. Received unexpected 369295616 byte message!" in server's splunkd.log?. 06-05-2020 12:47 AM
- Got Karma for Re: 6.2 Forwarder Configuration on Linux: Why am I getting error "TcpInputProc - Message rejected. Received unexpected 369295616 byte message!" in server's splunkd.log?. 06-05-2020 12:47 AM
- Got Karma for Re: 6.2 Forwarder Configuration on Linux: Why am I getting error "TcpInputProc - Message rejected. Received unexpected 369295616 byte message!" in server's splunkd.log?. 06-05-2020 12:47 AM
- Got Karma for Re: 6.2 Forwarder Configuration on Linux: Why am I getting error "TcpInputProc - Message rejected. Received unexpected 369295616 byte message!" in server's splunkd.log?. 06-05-2020 12:47 AM
- Got Karma for Re: 6.2 Forwarder Configuration on Linux: Why am I getting error "TcpInputProc - Message rejected. Received unexpected 369295616 byte message!" in server's splunkd.log?. 06-05-2020 12:47 AM
- Got Karma for Re: 6.2 Forwarder Configuration on Linux: Why am I getting error "TcpInputProc - Message rejected. Received unexpected 369295616 byte message!" in server's splunkd.log?. 06-05-2020 12:47 AM
- Got Karma for Re: 6.2 Forwarder Configuration on Linux: Why am I getting error "TcpInputProc - Message rejected. Received unexpected 369295616 byte message!" in server's splunkd.log?. 06-05-2020 12:47 AM
- Got Karma for datamodel acceleration (TSIDX) & user grants on index. 06-05-2020 12:47 AM
- Got Karma for datamodel acceleration (TSIDX) & user grants on index. 06-05-2020 12:47 AM
- Got Karma for Re: 6.2 Forwarder Configuration on Linux: Why am I getting error "TcpInputProc - Message rejected. Received unexpected 369295616 byte message!" in server's splunkd.log?. 06-05-2020 12:47 AM
- Got Karma for Re: Effect the change in Splunk. 06-05-2020 12:47 AM
- Karma Re: where i can learn regular expressions to use them and to create my own regex for dart. 06-05-2020 12:46 AM
- Karma Re: where i can learn regular expressions to use them and to create my own regex for Ayn. 06-05-2020 12:46 AM
- Karma Re: splunkweb service wouldn't start for MarMoh. 06-05-2020 12:46 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 2 | |||
| 1 | |||
| 0 |
02-02-2017
05:26 AM
1 Karma
try:
splunkjs.mvc.Components.getInstance(id).remove();
where id is the object (eg. panel-id), you want to remove ...
example: splunkjs.mvc.Components.getInstance("element1").remove();
... View more
11-10-2016
07:50 AM
Why not :
... base_search ... | top EventCode by host
Quite simple ... or I missed something ... ?
... View more
try to got to en-US/info an hit the "Static resource cache control" - same error?
try to hit (on the same page ) "EAI object refresh"
btw.: Admin rights?
... View more
02-10-2015
06:17 AM
10 Karma
This error message also occurs, when enable SSL on the forwarder, but have Non-SSL inputs (splunktcp://9997 instead of splunktcp-ssl:9997) on the indexer. Don't forget to add the SSL stanza in the inputs.conf on the indexer side.
http://wiki.splunk.com/Community:Splunk2Splunk_SSL_DefaultCerts
... View more
10-23-2014
01:48 AM
Having the same Django traceback (other app) ... Did you find a solution, Marc?
... View more
10-22-2014
05:45 AM
"Beginning with version 6.0, Splunk Enterprise does not support the customization of event displays using event renderers"
:(
... View more
07-01-2014
08:26 AM
OK, this is weird - not the first bad case regarding datamodels .... open a ticket @ splunk!
... View more
07-01-2014
06:00 AM
Maybe the order is done alphabetic ascending, and not chronological/hierarchical?
... View more
07-01-2014
04:31 AM
and you can define the spans for the (1hour) buckets by:
... | timechart span=1h avg(DURATION)
... View more
07-01-2014
04:18 AM
Hi!
1.) write a custom search command in python, which pushes events to the ftp.
Basics of writing a search command here:
http://docs.splunk.com/Documentation/Splunk/6.1.1/Search/Writeasearchcommand
2.) make a search with that command and store that as scheduled report.
eg.: index = * foo="bar" | customsearchcommandforftpupload
... View more
06-30-2014
05:55 AM
OK, here it is clue:
I use 2 userroles (rprod, rtest) - inherited from object/role user:
authorize.conf
[role_user]
srchIndexesAllowed =
[role_rprod]
importRoles = user
srchIndexesAllowed = index1
srchIndexesDefault = index1
[role_rtest]
importRoles = user
srchIndexesAllowed = index2
srchIndexesDefault = index2
user1 is member of role rprod / user2 is member of role rtest
by default, the user-role has the property:
[role_user]
srchIndexesAllowed = *
and this caused the problem, because I used searches by sourcetype not by index, to be more flexible in customeres usecases ...
... View more
06-24-2014
06:36 AM
.app-bar .app-name .app-label are styles in Splunk 5, I think ...
The "splunk>"-Logo is just text and should not be changed (I don't know the guidelines for that ...) But if you want to change it anyway, you have to do this via javascript/jQuery ...
... View more
06-24-2014
06:16 AM
Hiding Messages/Settings/Activity/Help
li.dropdown.messages.shared-splunkbar-messages {display: none;}
li.dropdown.menu-system.shared-splunkbar-systemmenu {display: none;}
li.dropdown.activity.shared-splunkbar-activitymenu {display: none;}
li.dropdown.help.shared-splunkbar-helpmenu {display: none;}
... View more
06-24-2014
06:11 AM
Try :
.navbar .brand { display:none }
... View more
06-23-2014
07:09 AM
Just simple pass the token(values) for "earliest" and "latest" (you receive from e.data)
Simple put a "console.log(e.data)" within that function to see it and then put it into
unsubmittedTokens.set('form.earliest', e.data[earliest]);
unsubmittedTokens.set('form.latest', e.data[latest]);
Then submit the (unsubmitted) tokens ( is already done by
submittedTokens.set(unsubmittedTokens.toJSON());
) - that's it, I think!
Greetz, Robert
... View more
06-23-2014
06:38 AM
1 Karma
You can also use the http://[SPLUNKSERVER]:8000/en-us/debug/refresh to reload conf-files 🙂
... View more
06-23-2014
05:37 AM
2 Karma
Hi splunkers!
I have a problem regarding TSIDX-Files (acc. datamodels):
when having eg. index1 (production) and index2 (test) - users should have access (grants) to index1 OR index2, but not to both (user1->index1, user2->index2) ... (standard splunk) user roles don't work with tsidx by design, I think ... is there a possibility (or workarounds) to grant access to the specific index for user(role)s when using TSIDX (acceleratored datamodels)?
Greetz, Robert
... View more
06-04-2014
06:40 AM
2 Karma
@alacercogitatus : Some typo there :
WRONG:
var mySearch = mySearch.data("results");
WORKING:
var myResults = mySearch.data("results");
🙂
... View more
03-28-2014
02:35 AM
I think, not in an easy way.
Because SimpleXML is straightforward ... without possibilities of integrate modules -> Advanced XML.
I did similar transformation of some (javascript) modules (Advanced XML and Django) in SimpleXML by adding a <html> tag within simpleXML and extend simpleXML by using javascript and render that into a <div> .
<form script="custom_view.js" stylesheet="custom.css">
<label>Custom View</label>
<description>Add a custom view</description>
<fieldset autoRun="true" submitButton="false">
<input type="time" token="mytime" searchWhenChanged="true">
<label>Timerange</label>
<default>
<earliestTime>-5m</earliestTime>
<latestTime>now</latestTime>
</default>
</input>
</fieldset>
<row>
<html>
<title>Counter for sourcetypes</title>
<div id="customview"/>
</html>
</row>
</form>
Maybe this approach will be helpful ...
... View more
03-17-2014
09:35 AM
Or if using tokens (for the input(s)), you can manipulate the token-model, which is easier to handle and use for other purposes (eg. drilldowns)
... View more
03-17-2014
08:49 AM
Well, this ain't easy to answer ... without knowing your dashboard(s) and your "filter values" (where they come from - which object? Do you use (a) input field(s) or dropdown, radio, ...?)
In Simple XML it's very hard to get control of objects and the code.
You have to investigate, which id's in the code are used for that object.
E.g.: if you use (only) one (or the first) input field in that dashboard, the id would be "field1". So you can access that via JQuery and set the cookies depending on that (changed) value - done with an event handler. And get the cookie and set the input value.
... View more
03-17-2014
06:23 AM
| dedup id
will filter only ("real") unique IDs - as counted by :
| stats dc(id)
... View more
03-17-2014
04:09 AM
Don't know, what the problem is ...
do you get no results (as a list)?
you get results but, the pie chart is rendered with wrong or no values?
Maybe your field "Status" is called "status" or "TaskId", "TaskID" or some (other) typo?
Greetz, Robert
... View more
