Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About kairat
kairat
New Member
Member since:
07-08-2018
06-05-2020
Community Statistics
| Posts | 9 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 07-08-2018 |
Activity Feed
- Posted Re: Python splunk submit event doesnt work correctly, event not found in splunk on Building for the Splunk Platform. 07-15-2018 09:47 PM
- Posted Re: Splunk ignores events with many colon inside, how to fix it? on Building for the Splunk Platform. 07-10-2018 09:31 PM
- Posted Re: Python splunk submit event doesnt work correctly, event not found in splunk on Building for the Splunk Platform. 07-10-2018 09:26 PM
- Posted Re: Splunk ignores events with many colon inside, how to fix it? on Building for the Splunk Platform. 07-10-2018 09:24 PM
- Posted Re: Python splunk submit event doesnt work correctly, event not found in splunk on Building for the Splunk Platform. 07-09-2018 08:58 PM
- Posted Splunk ignores events with many colon inside, how to fix it? on Building for the Splunk Platform. 07-09-2018 08:55 PM
- Tagged Splunk ignores events with many colon inside, how to fix it? on Building for the Splunk Platform. 07-09-2018 08:55 PM
- Tagged Splunk ignores events with many colon inside, how to fix it? on Building for the Splunk Platform. 07-09-2018 08:55 PM
- Tagged Splunk ignores events with many colon inside, how to fix it? on Building for the Splunk Platform. 07-09-2018 08:55 PM
- Tagged Splunk ignores events with many colon inside, how to fix it? on Building for the Splunk Platform. 07-09-2018 08:55 PM
- Posted Re: Why python file executes successfully to add data to an index through Splunk Python SDK, but no events are found in the index? on Building for the Splunk Platform. 07-09-2018 01:18 AM
- Posted Re: Why python file executes successfully to add data to an index through Splunk Python SDK, but no events are found in the index? on Building for the Splunk Platform. 07-08-2018 10:53 PM
- Posted Python splunk submit event doesnt work correctly, event not found in splunk on Building for the Splunk Platform. 07-08-2018 10:48 PM
- Tagged Python splunk submit event doesnt work correctly, event not found in splunk on Building for the Splunk Platform. 07-08-2018 10:48 PM
- Tagged Python splunk submit event doesnt work correctly, event not found in splunk on Building for the Splunk Platform. 07-08-2018 10:48 PM
- Tagged Python splunk submit event doesnt work correctly, event not found in splunk on Building for the Splunk Platform. 07-08-2018 10:48 PM
Topics I've Started
07-15-2018
09:47 PM
Thanks for your answer, the problem is in ":" colons in event, it still doesn't work with the code your provided on github. I wonder if you can try it, in my case it ignores
"145.255.2.146 - - [2015-12-12*:22:21:00* +0100] ""GET /administrator/ HTTP/1.1"" 200 4263 ""-"" ""Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"" ""-"""
PS: If I remove colons ":" it works as in using socket, and your code.
... View more
07-10-2018
09:31 PM
The code I provided works, but if I add :, it doesnt send event. I can replace colons, but I wonder why It doesn't work.
Splunk can read events with colons, so that's weird.
... View more
07-10-2018
09:26 PM
It's OK with double quotes, the problem is about : When I removed colons(:), as in the comment provided with code, it works. I don't know why it's so.
... View more
07-10-2018
09:24 PM
Colons, I forgot to add it in the event 😞 The original is like
"37.31.31.31 - - [13/Dec/2015:23:08:40 +0100] ""POST /administrator/index.php HTTP/1.1"" 200 4494 ""
... View more
07-09-2018
08:58 PM
I want to send an event using python-sdk.
Event's content "145.255.2.146 - - [2015-12-12:23:08:40 +0100] ""GET /administrator/ HTTP/1.1"" 200 4263 ""-"" ""Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"" ""-"""
If we remove colons event will be sent, please, help me.
The code below doesn't show any mistake, neither add an event to splunk
import splunklib.client as client
service = client.connect(
host=HOST,
port=PORT,
username=USERNAME,
password=PASSWORD)
myindex = service.indexes["main"]
mysocket = myindex.attach(sourcetype='access_combined.log',host='local')
mysocket.send(str.encode('"145.255.2.146 - - [2015-12-12 +0100] ""GET /administrator/ HTTP/1.1"" 200 4263 ""-"" ""Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"" ""-"""'))
mysocket.close()
... View more
07-09-2018
08:55 PM
I want to send an event using python-sdk.
Event's content "145.255.2.146 - - [2015-12-12:23:08:40 +0100] ""GET /administrator/ HTTP/1.1"" 200 4263 ""-"" ""Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"" ""-"""
If we remove colons event will be sent, please, help me.
The code below doesn't show any mistake, neither add an event to splunk
import splunklib.client as client
service = client.connect(
host=HOST,
port=PORT,
username=USERNAME,
password=PASSWORD)
myindex = service.indexes["main"]
mysocket = myindex.attach(sourcetype='access_combined.log',host='local')
mysocket.send(str.encode('"145.255.2.146 - - [2015-12-12:23:08:40 +0100] ""GET /administrator/ HTTP/1.1"" 200 4263 ""-"" ""Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"" ""-"""'))
mysocket.close()
... View more
07-09-2018
01:18 AM
The problem is about ": : : ". How to fix it????
... View more
07-08-2018
10:53 PM
How about if there is long string, such as "37.31.31.31 - - [13/Dec/2015:23:08:40 +0100] ""POST /administrator/index.php HTTP/1.1"" 200 4494 """ ""Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"" ""-""" Somehow it ignores it...
... View more
07-08-2018
10:48 PM
When I try to add event string like = "37.31.31.31 - - [13/Dec/2015:23:08:40 +0100] ""POST /administrator/index.php HTTP/1.1"" 200 4494 ""http://almhuette-raith.at/administrator/"" ""Mozilla/5.0 (Windows NT 6.0; rv:34.0) Gecko/20100101 Firefox/34.0"" ""-"""
It ignores it, not throwing any errors.
When I send events like "HELLO", "THIS IS TEST" it works.
The code sample is here:
import splunklib.client as client
service = client.connect(
host=HOST,
port=PORT,
username=USERNAME,
password=PASSWORD)
myindex = service.indexes["main"]
myindex.submit(STRING, sourcetype="access_combined.log", host="local")
Version 2
with myindex.attached_socket(sourcetype='access_combined.log') as sock:
sock.send(str.encode(STRING))
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
