Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About marco_sulla
marco_sulla
Path Finder
Member since:
11-26-2014
06-05-2020
Community Statistics
| Posts | 23 |
| Solutions | 4 |
| Karma Given | 17 |
| Karma Received | 20 |
| Member Since | 11-26-2014 |
Activity Feed
- Karma Re: How users without read permission on Search App can change their password? for Yasaswy. 06-05-2020 12:47 AM
- Karma Re: What are the benefits of the KV store vs a traditional lookup table in Splunk 6.2? for bfernandez. 06-05-2020 12:47 AM
- Karma Re: How to change service.jobs.oneshot to return unlimited number of rows in its result set? for dolivasoh. 06-05-2020 12:47 AM
- Karma Re: How to change service.jobs.oneshot to return unlimited number of rows in its result set? for fere. 06-05-2020 12:47 AM
- Karma How to change service.jobs.oneshot to return unlimited number of rows in its result set? for fere. 06-05-2020 12:47 AM
- Got Karma for Re: SplunkJS: What's the difference between get() and getInstance()?. 06-05-2020 12:47 AM
- Got Karma for Re: Where are users' roles stored, or how can I copy users' roles from one Splunk instance to another?. 06-05-2020 12:47 AM
- Got Karma for Re: Where are users' roles stored, or how can I copy users' roles from one Splunk instance to another?. 06-05-2020 12:47 AM
- Got Karma for Re: How to change service.jobs.oneshot to return unlimited number of rows in its result set?. 06-05-2020 12:47 AM
- Got Karma for Re: How to change service.jobs.oneshot to return unlimited number of rows in its result set?. 06-05-2020 12:47 AM
- Got Karma for Re: How to change service.jobs.oneshot to return unlimited number of rows in its result set?. 06-05-2020 12:47 AM
- Got Karma for Re: How to change service.jobs.oneshot to return unlimited number of rows in its result set?. 06-05-2020 12:47 AM
- Got Karma for Re: How to change service.jobs.oneshot to return unlimited number of rows in its result set?. 06-05-2020 12:47 AM
- Got Karma for Re: How to change service.jobs.oneshot to return unlimited number of rows in its result set?. 06-05-2020 12:47 AM
- Got Karma for Re: How to change service.jobs.oneshot to return unlimited number of rows in its result set?. 06-05-2020 12:47 AM
- Got Karma for Re: SplunkJS: What's the difference between get() and getInstance()?. 06-05-2020 12:47 AM
- Got Karma for Re: SplunkJS: What's the difference between get() and getInstance()?. 06-05-2020 12:47 AM
- Got Karma for SplunkJS: What's the difference between get() and getInstance()?. 06-05-2020 12:47 AM
- Got Karma for SplunkJS: What's the difference between get() and getInstance()?. 06-05-2020 12:47 AM
- Got Karma for SplunkJS: What's the difference between get() and getInstance()?. 06-05-2020 12:47 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 3 | |||
| 0 | |||
| 0 |
10-16-2015
01:45 AM
The "data import" user has already an admin role, so its limits are much higher. I suppose max_searches_per_cpu has a much higher priority, and I'm searching a way to bypass it.
Yes, adding search headers is a good workaround, but it's not an optimal solution. This way is very simple to do a DDoS attack that will prevent data importing.
... View more
10-15-2015
08:07 AM
Is there a way to bypass max_searches_per_cpu setting (in limits.conf) for a given user or role?
I need to to this for a user that is deputed to data import (the data import work consists also in splunk searches)
... View more
10-10-2015
03:24 AM
You're right, I missed to change the default app. And since I'm on Linux I could create a soft link to authentication_change_user_password.xml .
Alternatively I could also add the link to all the apps the role can use and see, as well as the launcher one.
I think that if I'll have time I'll create a custom "Edit Account" page using Python SDK, since the app is a django app and we added custom user preferences.
... View more
10-09-2015
02:43 AM
It doesn't work. It seems Splunk uses only the page located under the search app, it doesn't search for "alternatives".
... View more
10-08-2015
09:31 AM
I disabled for a particular role the read permission on search app. The problem is users with that role can't change their password; in Edit Account you can see nothing.
How can I disable the search app and continue to allow users with that role to change their settings?
... View more
09-28-2015
07:51 AM
1 Karma
Connection between roles and users are stored in that file. Please check.
authorize.conf does only contains roles, not connection between users and roles.
... View more
09-28-2015
06:53 AM
1 Karma
I found it. User's roles are stored in $SPLUNK_HOME/etc/passwd file. So I you have also to copy that file if you want to sync users between two Splunk instances.
To recap:
Follow these instructions (and the info in comments) if you have to sync users and roles for the first time.
Later, you have to sync only:
$SPLUNK_HOME/etc/users
$SPLUNK_HOME/etc/system/local/authorize.conf (or wherever you put it)
$SPLUNK_HOME/etc/passwd
... View more
09-28-2015
05:57 AM
I followed the instructions in this answer (and their comments too) but I can't copy the user's roles from one Splunk to another.
Where are user's roles stored? I checked the $SPLUNK_HOME/etc/users folder and it does not seem to contain such information.
... View more
09-11-2015
01:12 AM
You have to copy also the $SPLUNK_HOME/etc/system/local/authorize.conf file if you have one.
... View more
06-29-2015
01:54 PM
Link please?
... View more
05-29-2015
08:55 AM
IMHO this is completely unexpected and unwanted in the majority of cases. It is supposed this is not a framework for physical calcula...
... View more
05-28-2015
08:59 AM
2 Karma
Thank you, I used that to make the code independent from app name (if I want to create a production and a development app, or an xml and a django app):
var app_name;
require(["splunkjs/mvc/utils"], function (SplunkUtil) {
"use strict";
app_name = SplunkUtil.getCurrentApp();
var libs = [
"../app/" + app_name + "somelibrary",
// other dependences
];
require(libs, function (SomeLibrary, /* other objects */) {
// code block
});
});
... View more
05-27-2015
02:51 AM
Is there a way to get the current app name with Javascript?
I tried to use Splunk.util.getCurrentApp() from the console, but it fails. Reading the source code, it should return an attribute of the document body that does not exists. This happens also with the Search app. Furthermore, if I try to use it in my js code, JS gives me error because Splunk var is undefined.
... View more
- Tags:
- javascript
- splunkjs
04-25-2015
11:02 AM
You can create an empty html tag and fill it with an html element created by javascript. The data will be populated by the searchmanager. You have also to bind events to the elements and change the tokens accordingly, as Splunk does for their own elements. You can find a basic example here:
http://dev.splunk.com/view/webframework-splunkjsstack/SP-CAAAERK
... View more
04-25-2015
10:46 AM
3 Karma
With getInstance() you can also create the component if it does not exists. From $SPLUNK_HOME/share/splunk/search_mrsparkle/exposed/js/splunkjs/mvc/registry.js :
/**
* @param id The id of the instance to return.
* @param options (Optional).
* @param options.create Whether to create a new token model with
* the given name if the specified instance
* does not exist.
* @return The specified instance, or a falsy value
* if the instance does not exist and
* options.create is omitted or false.
*/
getInstance: function(id, options) {
options = options || {};
// If an instance with this id doesn't exist,
// figure out whether we want to create one or not.
if (!this.has(id)) {
if (options.create) {
this.registerInstance(id, this._createTokenModel(id));
}
else {
console.error(this.createError("No instance with id: " + id));
}
}
return this.get(id);
},
... View more
