About rroberts

rroberts · ‎01-22-2015

Is event typing also handled by the typingQueue?

rroberts · ‎01-13-2015

Is this app free?

rroberts · ‎01-07-2015

I can get details about my dashboard and nav files from : | rest /services/data/ui/view | rest /services/data/ui/nav However when I just use | rest /services/data/ui I see an endpoint called panels. I would assume this is for prebuilt panels but | rest /services/data/ui/panels yields no results even though I have prebuilt panels under .../data/ui. Is the endpoint supported in 6.2?

rroberts · ‎12-11-2014

Problem seemed to go away after upgrading to 6.2! Woohoo!

rroberts · ‎12-11-2014

It was a newly created index with nothing in it.

rroberts · ‎11-07-2014

How much is your TA?

rroberts · ‎10-27-2014

Any updates to this for SimpleXML or HTML/JS Splunk 6.X?

rroberts · ‎09-29-2014

Im on Splunk 6.1.3 and Im still seeing this problem: Refused to display 'https://sites.google.com/site/rickerlr/' in a frame because it set 'X-Frame-Options' to 'SAMEORIGIN'. I have set in my $SPLUNK_HOME/etc/system/local/web.conf x_frame_options_sameorigin = False , restarted Splunk but still getting the same error. Ideas?

rroberts · ‎09-26-2014

Looks like the only way to edit the color is by command line edit of event_renderers.conf.

rroberts · ‎09-17-2014

And happened again today: Signal sent by PID 1849 running under UID 514. Crashing thread: OneShotFileWriter Im running Splunk as UID 514, I created the diag as splunk admin (UID 514) . Then attempted to eat the diag via SplunkWeb. The manifest file shows: f 444 splunk splunk splunk/README-splunk.txt d 755 splunk splunk splunk/bin f 555 splunk splunk splunk/bin/bloom f 555 splunk splunk splunk/bin/btool f 555 splunk splunk splunk/bin/btprobe

rroberts · ‎09-05-2014

Is this still a possibility with Splunk 6.0 and higher? "The search process can't parse the search string. In the search.log" INFO SearchParse - {1758 byte str!} Meaning : This is a 1.7kb string…really long

rroberts · ‎09-03-2014

Did you try .. index=bc_logs | rex field=url "(? [^/]+.zip$)" | stats count by filename | sort -count Putting a $ after zip to declare "ends with zip"?

rroberts · ‎09-03-2014

Happened again today. This time UID 526. Manifest file shows: -r--r--r-- 1 instructor student 840213 Sep 2 16:57 splunk-6.1.1-207789-linux-2.6-x86_64-manifest Splunk 6.1.1 by the way.

rroberts · ‎08-15-2014

I tried something similar but saw no difference.

rroberts · ‎08-15-2014

Ive changed the value for fieldforLabel attribute on the populatingSearch element to something arbitrary and it seems to make no difference. What does this attribute actually do? It is listed as mandatory in the XML reference docs.

Posts	299
Solutions	56
Karma Given	158
Karma Received	174
Member Since	‎04-28-2010

Online Status	Offline
Date Last Visited	‎06-05-2020 02:02 AM

After upgrading to 6.5.0, why are there so many Ti...

Splunk Add-on Builder: Why isn't the download butt...

Why does search typeahead no longer show "matching...

Splunk App for Enterprise Security 3.3.1: How to c...

Does SHC support ES app

Is this Splunk App for Stream free?

REST API endpoint for prebuilt panels doesnt seem ...

Is it possible to have a search string so long tha...

What is the purpose of fieldforLabel attribute?

Checking conf files for problems...

Re: Questions about Splunk Queues.

Is this Splunk App for Stream free?

REST API endpoint for prebuilt panels doesnt seem ...

Re: Crashing thread: OneShotFileWriter

Re: Crashing thread: OneShotFileWriter

Re: TA for IIS that follows the Common Informatio...

Re: Change click behavior in Search in 4.1.2

Re: iframes and views broken after Splunk 6 upgrad...

Re: Custom event renderers in Splunk 6

Re: Crashing thread: OneShotFileWriter

Is it possible to have a search string so long tha...

Re: Rex not extracting expected value

Re: Crashing thread: OneShotFileWriter

Re: What is the purpose of fieldforLabel attribute...

What is the purpose of fieldforLabel attribute?