About nikhiltikoo

nikhiltikoo · ‎10-14-2015

I am searching for some data on Splunk for a 5 minute time range. I want this search to run after every 5 minutes in Splunk on its own. How can this be done? I tried finding it on Splunk, but all I can see is how to schedule alerts and reports. And after the search is activated, how can we access the produced results generated by the search?

nikhiltikoo · ‎10-05-2015

This is the code that i am using import urllib import httplib2 import time import re from time import localtime,strftime from xml.dom import minidom import json baseurl = 'https://localhost:8089' username = '' password = '' myhttp = httplib2.Http() servercontent = myhttp.request(baseurl + '/services/auth/login', 'POST', headers={}, body=urllib.urlencode({'username':username, 'password':password}))[1] sessionkey = minidom.parseString(servercontent).getElementsByTagName('sessionKey')[0].childNodes[0].nodeValue print "====>sessionkey: %s <====" % sessionkey

nikhiltikoo · ‎10-05-2015

I am not reading anything from the standard input. I just want to obtain the session key for the on going session. config_str = sys.stdin.read() -> This prompts user to input something. Whereas i don't want to input anything. I am just trying to retrieve the session id for the session in order to connect to the splunk.

nikhiltikoo · ‎10-04-2015

I am trying to get the result of a search from Splunk, but when I try to get the session key, I am getting the following error. Traceback (most recent call last): File "splunkenter.py", line 18, in sessionkey = minidom.parseString(servercontent).getElementsByTagName('sessionKey')[0].childNodes[0].nodeValue IndexError: list index out of range Can anybody tell me where is the problem lying? I am very new to API's.

nikhiltikoo · ‎09-20-2015

I am working on an app called 'Custom Visualizations' in splunk. With the data that i have, i am making a dendrogram. But the data sets are too large and the graph is getting cut out because of going out of screen. Is there any way that this graph can be auto resized or auto aligned according to the size of the data sets? Any help would be appreciated.

nikhiltikoo · ‎09-17-2015

@gpradeepkumarreddy Thanks a ton. Worked like charm.

nikhiltikoo · ‎09-17-2015

@gpradeepkumarreddy where should i add this value?

nikhiltikoo · ‎09-16-2015

I am searching some data from the Splunk and displaying it as a dendrogram using the "Custom Visualizations" app for Splunk. But with my data, I am getting something called as NAN -1 in the dendrogram graph. I don't want this data to be shown in the graph. Any help will be appreciated.

nikhiltikoo · ‎09-07-2015

I am using the app Custom Visualizations in Splunk to generate some flowcharts. The are a few XML tags in the source file of the app that I don't know the functionality of. Will be really helpful if someone explains how these tags work.. these are the tags in question: wrap rowNumbers dataOverlayMode list.drilldown list.wrap maxLines raw.drilldown table.drilldown table.wrap type count If there are some other useful tags as well, would be really nice if you discuss them as well Thanks

nikhiltikoo · ‎08-30-2015

Sideview Utils version is 3.3.6 and the splunk version is 6.2.5 Okay let me install the latest version of Sideview Utils and see if it solves the issue i am facing.

nikhiltikoo · ‎08-28-2015

Hi. I am facing the same problems. This is the list that is being generated on running the command | splunkentity apps/local | table name name afterglow d3plus framework gettingstarted introspection_generator_addon launcher learned legacy log_source_status netflow sample_app search sideview_utils simple_xml_examples sos splunk_datapreview splunk_management_console SplunkForwarder SplunkLightForwarder

nikhiltikoo · ‎08-27-2015

SideviewUtils module is present as Splunk.Module.SideviewUtils. Even the Pulldown, Search and HTML modules are listed there. The only error it shows is this. "Splunk encountered the following unknown module: "HTML" . The view may not load properly." And this message is showed twice. In Developer console, i am getting a javascript error saying "application.js:121 Uncaught ReferenceError: Sideview is not defined". The count is incrementing as i keep clicking the Bump Version button 4 ` <head> <meta http-equiv="X-UA-Compatible" content="IE=edge" /> <meta http-equiv="content-type" content="text/html; charset=utf-8" /> <meta http-equiv="content-language" content="en_GB" /> <meta http-equiv="imagetoolbar" content="no" /> <meta name="author" content="Splunk Inc." /> <link rel="shortcut icon" href="/en-GB/static/@272645.40/img/favicon.ico" /> <link rel="apple-touch-icon-precomposed" sizes="57x57" href="/en-GB/static/@272645.40/img/bookmark/apple-icon-57x57-precomposed.png" /> <link rel="apple-touch-icon-precomposed" sizes="72x72" href="/en-GB/static/@272645.40/img/bookmark/apple-icon-72x72-precomposed.png" /> <link rel="apple-touch-icon-precomposed" sizes="114x114" href="/en-GB/static/@272645.40/img/bookmark/apple-icon-114x114-precomposed.png" /> <link rel="apple-touch-icon-precomposed" sizes="144x144" href="/en-GB/static/@272645.40/img/bookmark/apple-icon-144x144-precomposed.png" /> <meta name="msapplication-TileColor" content="#65A637"> <meta name="msapplication-TileImage" content="/en-GB/static/@272645.40/img/bookmark/ms-tileicon-144x144.png"> <title> Sideview Editor <script type="text/javascript"> window.$C = {"SPLUNKD_FREE_LICENSE": false, "JS_LOGGER_LEVEL": "INFO", "UI_UNIX_START_TIME": 1440573142, "JSCHART_TEST_MODE": false, "SYSTEM_NAMESPACE": "system", "JSCHART_TRUNCATION_LIMIT_IE10": 20000, "JSCHART_TRUNCATION_LIMIT_IE11": 20000, "USERNAME": "admin", "MRSPARKLE_ROOT_PATH": "", "FLASH_MAJOR_VERSION": 9, "JS_LOGGER_MODE": "None", "SEARCH_RESULTS_TIME_FORMAT": "%Y-%m-%dT%H:%M:%S.%Q%z", "JS_LOGGER_MODE_SERVER_POLL_BUFFER": 1000, "VERSION_LABEL": "6.2.5", "JSCHART_TRUNCATION_LIMIT": null, "JS_LOGGER_MODE_SERVER_END_POINT": "util/log/js", "DISPATCH_TIME_FORMAT": "%s.%Q", "JOB_MAX_POLLING_INTERVAL": 1000, "BUILD_PUSH_NUMBER": 40, "BUILD_NUMBER": 272645, "SSO_CREATED_SESSION": false, "EMBED_FOOTER": "splunk>", "MAX_UPLOAD_SIZE": 524288000, "JSCHART_TRUNCATION_LIMIT_CHROME": 20000, "PDFGEN_IS_AVAILABLE": 1, "SERVER_ZONEINFO": "### SERIALIZED TIMEZONE FORMAT 1.0;C0;Y0 NW 55 54 43;$", "JS_LOGGER_MODE_SERVER_MAX_BUFFER": 100, "DJANGO_ROOT_PATH": "/dj", "JSCHART_TRUNCATION_LIMIT_FIREFOX": 20000, "FLASH_MINOR_VERSION": 0, "SPLUNKD_PATH": "/en-GB/splunkd/__raw", "DEFAULT_NAMESPACE": "search", "UI_INACTIVITY_TIMEOUT": 60, "PIVOT_ADHOC_ACCELERATION_MODE": "Elastic", "JOB_MIN_POLLING_INTERVAL": 100, "NOCACHE": false, "MRSPARKLE_PORT_NUMBER": "8000", "FLASH_REVISION_VERSION": 124, "SERVER_TIMEZONE_OFFSET": 0, "EMBED_URI": "", "JSCHART_TRUNCATION_LIMIT_IE7": 2000, "JSCHART_TRUNCATION_LIMIT_IE8": 2000, "JSCHART_TRUNCATION_LIMIT_IE9": 20000, "LOCALE": "en-GB", "ENABLE_PIVOT_ADHOC_ACCELERATION": true, "JSCHART_TRUNCATION_LIMIT_SAFARI": 20000} </script> <script type="text/javascript" src="/en-GB/static/@272645.40/js/common.min.js"></script> <script type="text/javascript" src="/en-GB/i18ncatalog?autoload=1"></script>  </head> <div class="splClearfix"></div> </body> `

nikhiltikoo · ‎08-25-2015

I am getting familiarized with the Sideview Util editor. Recently I deleted the Appbar and some other modules and since then, I am getting this message as soon as I open the Sideview Utils editor. The two HTML modules aren't getting recognized while deleting as well as editing.

Posts	13
Solutions	0
Karma Given	2
Karma Received	0
Member Since	‎08-25-2015

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

How to run a search in splunk after every 5 minute...

Why am I getting "IndexError: list index out of ra...

Auto-align the dendrogram in splunk

Custom Visualizations: How to hide NAN info from t...

How do these XML tags work in the Custom Visualiza...

Sideview Utils: "Splunk encountered the following ...

How to run a search in splunk after every 5 minute...

Re: Why am I getting "IndexError: list index out o...