About marco1987

marco1987 · ‎10-24-2024

Hello splunkers, I'm working with the latest version of Splunk Add-on Builder to index data from a REST API. TA only pulls the first page of results by calling: https://mywebpage.com/api/source/v2 At the bottom of the pulled data are URL for the next url: "next_url" : "/api/source/v2?last=5431" How do I configure TA for iterates through all the pages? I checked from link below, but i dont' understand how (or if is possible) pass the variable from modular input to my endpoint like this or in other way: https://mywebpage.com/api/source/v2?last=${next_url} https://docs.splunk.com/Documentation/AddonBuilder/4.3.0/UserGuide/ConfigureDataCollection#Pass_values_from_data_input_parameters Any ideas? Thanks!

marco1987 · ‎12-17-2021

Hello splunkers, i need to understand the best way to forward my data in multisite indexer cluster for Disaster Recovery management: For example, we have: On Site A 1 manager node (active) 3 peer nodes [IDX_1A, IDX_2A, IDX_3A ] (active) 1 search head (active) 2 Heavy Forwarder [HF_1A, HF_2A] (active) On Site B 1 manager node (stand by) 3 peer nodes [IDX_1B, IDX_2B, IDX_3B ] (active) 1 search head (stand by) 2 Heavy Forwarder [HF_1B, HF_2B] (standy By) On HF_1A and HF_2A the outputs.conf have to configure to send data to: 1) ALL site A and site B indexers (IDX_1A, IDX_2A, IDX_3A, IDX_1B, IDX_2B, IDX_3B) we suppose that HF can comunicate with all OR 2) Only site A IDX? (IDX_1A, IDX_2A, IDX_3A) OR 3) Any other way? Thanks in advance

marco1987 · ‎08-27-2019

Thank you diogofgm for your reply, but it doesn't work. After drilldown Splunk put "http://IP_Server:Port/en-US/app/Appname/" before "file://path" . The result is page not found.

marco1987 · ‎08-27-2019

Hi, i have a panel with a search like : index=myindex |dedup myID |eval link ="\\\myshare\\".myID |table _time IP myID link On Windows OS (Internet Explorer),it's possible to drilldown on link cell table and redirect to local share path ? I know that on IE browser writing something like "file://path" it works and open a new system window. Thanks

marco1987 · ‎06-21-2019

Posts	5
Solutions	0
Karma Given	8
Karma Received	5
Member Since	‎06-21-2019

Online Status	Offline
Date Last Visited	‎10-25-2024 09:27 AM

Splunk Add-on Builder - REST API input pagination

How to forward data in multisite cluster

How to drilldown to local windows share

Splunk Add-on Builder - REST API input pagination

How to forward data in multisite cluster

Re: How to drilldown to local windows share

How to drilldown to local windows share

Re: How to join two searches?

Are you a member of the Splunk Community?