If you open the browser dev tool and you can see an exception with some error message says "Unknown language: en-us", please change the locale in the url manually. Change the url like from http://localhost:8000/zh-CN/app/splunk_app_jenkins/job to http://localhost:8000/en-US/app/splunk_app_jenkins/job This is not a bug in app jenkins and it can not be fixed in app jenkins. it is related to how splunk handles the i18n. If you upgrade splunk to 8.x, this bugs should be gone. App jenkins can work with zh-cn. ... View more

yes. Please use an old version of eventgen. It should work with splunk 8.0. Do not use eventgen 7. After eventgen 7, it is only python3 supported. ... View more

please use an editor to open the SA-Eventgen app folder. Put an empty file under the sub directory SA-Eventgen/lib/splunk_eventgen. The empty file name should be init.py Do not put any content in the file. And restart splunk to check. Till now, the splunk_eventgen should be loaded as a module. Please make sure to set the python.version = python3 in server.conf. Starting from Eventgen 7.0, it is python3 only release. ... View more

Are you using the simple REST based data input? If yes, sounds like a bug. ... View more

Currently, there is no doc about the helper function yet. But for the ckpt related functions. the parameter key is a string which is the unique key for the state object. the state is a python dict which stores the states of your program. You can think the ckpt as a simple key-value store. the value is a python dict and the key is a string. ... View more

Hi Michael, Would you mind share the code snippet about the collect_events function? ... View more

Glad to know that. The app pre certification service validate your splunk.com user credential. 🙂 ... View more

Can you check the web_service.log in $SPLUK_HOME/var/log/splunk/web_service.log. See if you got any error message when you try to download the button. Also, you can use chrome debug tool to check if there are some rest call fails when you entering the summary page. ... View more

According to the error message, the KV store service is not working correctly. You can check the error log in splunkd.log and see if anything is wrong with kvstore when splunk starts. If you see some errors for kv store, or mongo service, then you can dig it deeper. ... View more

Since Add-on builder is a developer tool, only the user who is the admin role can use add-on builder. Frankly speaking, we did not test on the free license. As far as I know, when your trial license is expired, you can not use any ACL features in splunk enterprise. According to the stacktrace in web_service.log, I guess the ACL feature in your splunk might be disabled. Can you confirm that the ACL feature in your splunk works or not? If the ACL is disabled, the root cause of this error is found. Anyway, there is a general question here. Can add-on builder be used in splunk which only has free license? My answer will be yes. We have no reason to reject users to use add-on builder. What I want is to make sure everyone can use add-on builder in a development env easily. Normally, a free license splunk means a test or development environment. ... View more