Hello , I am trying to run an instance of splunk on docker-composite. Everything seems working , But I need to run splunk command to add a user, I don't know how to do it via docker-composer. So my problem is "How to configure docker-compose to run "? splunk add user test -role Admin -password testpassword -full-name "TEST" My Config docker-compose : version: "2" services: splunk: #build: . hostname: splunk image: splunk/splunk:7.2 environment: SPLUNK_START_ARGS: --accept-license --answer-yes SPLUNK_ENABLE_LISTEN: 9997 SPLUNK_ADD: tcp 1514 SPLUNK_PASSWORD: "test12345" volumes: - xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx ports: - "8000:8000" - "9997:9997" - "8088:8088" - "1514:1514" THANK YOU IN ADVANCE !!! ... View more

Hello community, I am facing a problem ,I have an instance of splunk installed on linux server , And I am trying to do a copy of this instance on my localhost which turns on windows machine.So I have done copy of all my apps and indexes.But I find out that while doing my requests, search commands like stats, timechart ....are working only in verbose mode, And they are returning no data in fast and smart mode. Any help please, N.B. : -Version splunk on linux : 7.2.0 -Version splunk on my local machine : 7.2.3 ... View more

Hello, I want to add icons to the appbar menu of splunk, And I can't find any reference for that..Any help please ? ... View more

Hello, I'm facing a problem, I am trying to send a file from a custom form to a python endpoint but I can't get my file , Any example of how to do it or any help please, I have tried with formdata but It seems that this formData is lost in request , And when I post with an object, My Python script gets it as a string so I can't do anything with it. Here's the code : Javascript : var service = mvc.createService(); var data = $("#userPostForm").serializeArray(); var data_obj = {}; var fdata = new FormData() /** * This part FOR FILE :*/ var file = $('#myFile').prop('files'); if (file.length != 0) { console.log('file :', file) fdata.append('file',file) data_obj['file']=file } else { $('#postResponseBox').empty(); $('#postResponseBox').append('<p>Vous devez télécharger un fichier</p>'); setTimeout(function () { $('#postResponseBox').empty(); }, 3000); } _.each(data, function (field) { var key = field['name']; var value = field['value']; fdata.append(key,value); data_obj[key]=value; }) // console.log('form data : '+ JSON.stringify(fdata)); // Display the key/value pairs for (var pair of fdata.entries()) { console.log(pair[0]+ ', ' + pair[1]); } service.post('/services/sendfile', fdata, function (err, response) { if (err) { console.log('error :', err); $('#postResponseBox').empty(); $('#postResponseBox').append('<p>' + err.data + '</p>'); $('#userPostForm')[0].reset(); setTimeout(function () { $('#postResponseBox').empty(); }, 3000); } else if (response.status === 200) { console.log('response from backend :', response); $('#postResponseBox').empty(); $('#postResponseBox').append('<p class="successBox">Username Submited successfuly!</p>'); $('#userPostForm')[0].reset(); setTimeout(function () { $('#postResponseBox').empty(); }, 3000); } }) Python import splunk from splunk.rest import logger import requests class Send(splunk.rest.BaseRestHandler): def handle_POST(self): try: payload = self.request["payload"] for el in payload.split("&"): key, value = el.split("=") # type: (object, object) if 'file' in key: file = value logger.info(type(file)) # This is detected as string # self.process_csv(value) except Exception, e: self.response.write(e) logger.error(e) handle_GET = handle_POST Please Any Help. ... View more

Hello community, I am trying to anonymise Data in Splunk, For that purpose I am using SEDCMD in splunk , The transformation applies perfectly with the _raw field ,but the fields are not modified accordingly.Please note that I do use csv extraction. Can U help ? In my props.conf .Here's my command : SEDCMD-NUMR_TICK = s/(SAV-xDSL)([0-9]{5})([0-9]{5})/NUMR1\3\2/g My output is "which is correct" : But when showing events I have my data shown without being anonymised : ... View more