Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About friscos
friscos
Explorer
Member since:
08-05-2016
06-05-2020
Community Statistics
| Posts | 27 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 2 |
| Member Since | 08-05-2016 |
Activity Feed
- Got Karma for Splunk JS Stack not working from external web page.. 06-05-2020 12:48 AM
- Got Karma for Splunk JS Stack not working from external web page.. 06-05-2020 12:48 AM
- Posted Re: Splunk JS Stack not working from external web page on Splunk Dev. 10-21-2016 05:49 AM
- Posted Re: Splunk JS Stack not working from external web page on Splunk Dev. 10-19-2016 07:37 AM
- Posted Re: Splunk JS Stack not working from external web page on Splunk Dev. 10-18-2016 06:16 PM
- Posted Splunk JS Stack not working from external web page. on Splunk Dev. 09-30-2016 07:08 AM
- Tagged Splunk JS Stack not working from external web page. on Splunk Dev. 09-30-2016 07:08 AM
- Tagged Splunk JS Stack not working from external web page. on Splunk Dev. 09-30-2016 07:08 AM
- Tagged Splunk JS Stack not working from external web page. on Splunk Dev. 09-30-2016 07:08 AM
- Tagged Splunk JS Stack not working from external web page. on Splunk Dev. 09-30-2016 07:08 AM
- Posted Re: How to embed splunk dashboard in external web page? on Dashboards & Visualizations. 09-29-2016 07:52 AM
- Posted How to embed splunk dashboard in external web page? on Dashboards & Visualizations. 09-28-2016 01:35 PM
- Tagged How to embed splunk dashboard in external web page? on Dashboards & Visualizations. 09-28-2016 01:35 PM
- Posted Re: How to include Field Extraction name in Splunk search? on Splunk Search. 09-22-2016 08:00 AM
- Posted Re: How to include Field Extraction name in Splunk search? on Splunk Search. 09-22-2016 07:58 AM
- Posted How to include Field Extraction name in Splunk search? on Splunk Search. 09-22-2016 07:17 AM
- Tagged How to include Field Extraction name in Splunk search? on Splunk Search. 09-22-2016 07:17 AM
- Posted Re: How do I modify my search to create a visualization from transaction id events? on Dashboards & Visualizations. 09-19-2016 09:45 AM
- Posted How do I modify my search to create a visualization from transaction id events? on Dashboards & Visualizations. 09-16-2016 01:23 PM
- Tagged How do I modify my search to create a visualization from transaction id events? on Dashboards & Visualizations. 09-16-2016 01:23 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 2 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
10-21-2016
05:49 AM
Burch,
localhost and 6080 is the hostname and port number of my local tomcat server. splunkdev and 8089 are the server hostname and port number.
... View more
10-19-2016
07:37 AM
Hi Burch,
I do not see the request reaching the server. There is no request information logged in splunkd.log.
I am not able to attach screenshots. here are the error messages:
Code Snippet (with /proxy and https):
<script>
splunkjs.config({
proxyPath: '/proxy',
scheme: 'https',
host: 'splunkdev.com',
port: 8089,
authenticate: {username: 'admin', password: 'test123'}
});
</script>
Error message on js console:
mvc.js:8819 POST http://localhost:6080/proxy/services/auth/login?output_mode=json 404 (Not Found)send @ mvc.js:8819ajax @ mvc.js:8249makeRequest @ mvc.js:24517request @ mvc.js:20231(anonymous function) @ mvc.js:19028post @ mvc.js:20166(anonymous function) @ mvc.js:19028login @ mvc.js:19746(anonymous function) @ mvc.js:19028authFunction @ mvc.js:70615loginLoad @ mvc.js:70634(anonymous function) @ mvc.js:70429execCb @ config.js:1636check @ config.js:872enable @ config.js:1143init @ config.js:780(anonymous function) @ config.js:1413
config.js:139 Uncaught Error: Login failed. Authenticate(done) received an error(anonymous function) @ mvc.js:70636(anonymous function) @ mvc.js:70617wrappedCallback @ mvc.js:19738wrappedCallback @ mvc.js:20212error @ mvc.js:24506(anonymous function) @ mvc.js:70831fire @ mvc.js:3161fireWith @ mvc.js:3273done @ mvc.js:8350callback @ mvc.js:8891
Code Snippet (with out proxy):
<script>
splunkjs.config({
proxyPath: '/',
scheme: 'https',
host: 'splunkdev.com',
port: 8089,
authenticate: {username: 'admin', password: 'test123'}
});
</script>
Error message on js console:
config.js:164 Uncaught Error: Load timeout for modules: splunkjs/ready!_unnormalized2,splunkjs/ready!
http://requirejs.org/docs/errors.html#timeoutmakeError @ config.js:164checkLoaded @ config.js:690(anonymous function) @ config.js:711
mvc.js:8819 OPTIONS http://services/auth/login?output_mode=json net::ERR_CONNECTION_TIMED_OUTsend @ mvc.js:8819ajax @ mvc.js:8249makeRequest @ mvc.js:24517request @ mvc.js:20231(anonymous function) @ mvc.js:19028post @ mvc.js:20166(anonymous function) @ mvc.js:19028login @ mvc.js:19746(anonymous function) @ mvc.js:19028authFunction @ mvc.js:70615loginLoad @ mvc.js:70634(anonymous function) @ mvc.js:70429execCb @ config.js:1636check @ config.js:872enable @ config.js:1143init @ config.js:780(anonymous function) @ config.js:1413
config.js:139 Uncaught Error: Login failed. Authenticate(done) received an error
... View more
10-18-2016
06:16 PM
Hi Burch,
I tried with https, 8089 port but no luck. I in fact tried all the combinations before posting it in the forum. I ran out of options now..
... View more
09-30-2016
07:08 AM
2 Karma
Hi, I am trying very hard to embed Splunk in an external webpage using Splunk JavaScript stack but no luck so far.
I am trying a very simple example from here http://dev.splunk.com/view/SP-CAAAEWS
Anyone had luck connecting to splunk from external webpages using SplunkJS?
The difference from the example and my environment are Proxy and Scheme My environment is not https and there is no proxy.
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
<title>Login Tests</title>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="stylesheet" type="text/css" href="static/splunkjs/css/bootstrap.css"/>
<style type="text/css">
.fail{
color: red;
}
.main-area {
padding: 30px;
}
</style>
</head>
<body>
<div class="main-area">
<h2>Login Form</h2>
<p>This page tests login and authentication. When you enter a
name and password, these credentials are used to log in
to Splunk.</p>
<p>If login is successful, a session key is returned and stored
in a cookie, along with the username. Then, you are redirected
to another page that uses the same session key.</p>
<br/>
<p><b>Username:</b></p>
<input id="usernamebox" type="text" value="admin">
<p><b>Password:</b></p>
<input id="pwbox" type="password" value="mypassword">
<br/>
<button class="btn" onclick="onLogin()">Log in</button>
<br/>
<div id="errorText"></div>
</div>
<script src="static/splunkjs/config.js"></script>
<script>
// Set the web site's base URL
require.config({
baseUrl: "/static"
});
// Log In button function
function onLogin() {
alert("Inside OnLogin");
require([
"jquery",
"splunkjs/splunk",
], function($, jssdk) {
alert('Inside Login');
// Get the username and passwords
var username = $("#usernamebox").val();
var password = $("#pwbox").val();
// Use the Splunk SDK for JavaScript to log in to Splunk
// Create a Service object
var http = new jssdk.ProxyHttp("/proxy");
var service = new jssdk.Service(http, {
username: username,
password: password,
scheme: "http",
host: "splunkdev",
port: 8000
});
// Log in to Splunk
service.login(function(err) {
alert('Inside Service Login');
// The session key and username are required for logging in
if (!err) {
var key = service.sessionKey;
// Save the session key and username in cookies
$.cookie("splunk_sessionkey", key);
$.cookie("splunk_username", username);
// Redirect to another page
window.location.href = "login_verify.html";
}
else {
alert('Login Failed');
$("#errorText").empty().append("<p class='fail'><br/>Login failed! See the console for error info.</p>");
console.error("Login failed: ", err);
}
});
});
}
</script>
</body>
</html>
... View more
Labels
- Labels:
-
Splunk Web Framework
-
SplunkJS
09-29-2016
07:52 AM
Hi, I see SplunkJS Stack can be used to embed splunk on external web pages.
I am trying the below code but could not get it working. what could be the issue?
<!DOCTYPE html>
<html lang="en">
<head>
<meta charset="utf-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1">
<title>Login Tests</title>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<link rel="stylesheet" type="text/css" href="static/splunkjs/css/bootstrap.css"/>
<style type="text/css">
.fail{
color: red;
}
.main-area {
padding: 30px;
}
</style>
</head>
<body>
<div class="main-area">
<h2>Login Form</h2>
<p>This page tests login and authentication. When you enter a
name and password, these credentials are used to log in
to Splunk.</p>
<p>If login is successful, a session key is returned and stored
in a cookie, along with the username. Then, you are redirected
to another page that uses the same session key.</p>
<br/>
<p><b>Username:</b></p>
<input id="usernamebox" type="text">
<p><b>Password:</b></p>
<input id="pwbox" type="password">
<br/>
<button class="btn" onclick="onLogin()">Log in</button>
<br/>
<div id="errorText"></div>
</div>
<script src="static/splunkjs/config.js"></script>
<script>
// Set the web site's base URL
require.config({
baseUrl: "static/"
});
// Log In button function
function onLogin() {
require([
"jquery",
"splunkjs/splunk",
], function($, jssdk) {
alert('Inside Login');
// Get the username and passwords
var username = $("#usernamebox").val();
var password = $("#pwbox").val();
// Use the Splunk SDK for JavaScript to log in to Splunk
// Create a Service object
var http = new jssdk.ProxyHttp("/proxy");
var service = new jssdk.Service(http, {
username: username,
password: password,
scheme: "http",
host: "splunkdev",
port: 8000
});
// Log in to Splunk
service.login(function(err) {
alert('Inside Service Login');
// The session key and username are required for logging in
if (!err) {
var key = service.sessionKey;
// Save the session key and username in cookies
$.cookie("splunk_sessionkey", key);
$.cookie("splunk_username", username);
// Redirect to another page
window.location.href = "login_verify.html";
}
else {
alert('Login Failed');
$("#errorText").empty().append("<p class='fail'><br/>Login failed! See the console for error info.</p>");
console.error("Login failed: ", err);
}
});
});
}
</script>
</body>
</html>
... View more
09-28-2016
01:35 PM
Hi, I have created a dashboard in splunk and would like to display the dashboard in external web page. Is that possible to embed dashboard in external web pages?
... View more
- Tags:
- splunk-enterprise
09-22-2016
08:00 AM
I tried index=main sourcetype=BANK_APPLOG TransID | table TransID, _raw but this did not return any results.
... View more
09-22-2016
07:58 AM
I have tried this but this retrieves all the events and not by transaction id.
index=main sourcetype=BANK_APPLOG | rex "^(?:[^>\n]*>){4}(?P<TransID>\w+)"
... View more
09-22-2016
07:17 AM
Hi,
I have extracted a transaction id using field extraction.
Field Extraction Name: BANK_APPLOG : EXTRACT-TransID
RegEx: ^(?:[^>\n]*>){4}(?P<TransID>\w+)
How do i include this field extraction name in the search so that I can retrieve all the transaction ids.
... View more
- Tags:
- splunk-enterprise
09-19-2016
09:45 AM
Thanks everyone for your help. I am now able to see the visualizations.
Here is what i am trying to achieve, I have a transaction that passes through 4 different webservices hosted on 4 different servers. I am trying to trace the transactions and visualize it on a graph. I have installed Sankey plugin for displaying the transactional flow.
... View more
09-16-2016
01:23 PM
Hi,
I am searching the logs to trace the events in the log files for a given transaction id.
I see the results from two servers, the flow is like this:
Transaction id 'T10001' produced 6 events.
9/16/16
11:42:43.000 AM T10001 host=server1 source=app1.log sourcetype=applog
9/16/16
11:42:43.000 AM T10001 host=server2 source=app2.log sourcetype=applog
9/16/16
11:42:43.000 AM T10001 host=server2 source=app2.log sourcetype=applog
9/16/16
11:42:43.000 AM T10001 host=server2 source=app2.log sourcetype=applog
9/16/16
11:42:43.000 AM T10001 host=server2 source=app2.log sourcetype=applog
9/16/16
11:42:43.000 AM T10001 host=server1 source=app1.log sourcetype=applog
I want to visualize these transactions, but currently my visualization tab says 'Your search isn't generating any statistic or visualization results. Here are some possible ways to get results.'
How do I change my search to visualize these transactional events?
... View more
09-16-2016
07:22 AM
Hi, Is there a way to generate a transaction flow diagram in Splunk?
Ex: Each transaction ID passes through 4 servers and I can view the sequence of log events in Splunk enterprise. I want to visualize these sequence of events. How do i achieve that?
Thanks
... View more
08-19-2016
05:54 AM
Yes, I see the selected fields and interesting fields. I did try extract the id field from the event xml (using regex) but not able to include that regex in the search.
... View more
08-18-2016
11:11 AM
host=myhostname | fields employee.id returns no results unfortunately.
... View more
08-18-2016
11:07 AM
no luck..doesn't fetch anything. thanks for your time.
... View more
08-17-2016
11:09 AM
I added KV_MODE=xml in the prop.xml and restarted the server.
How do i now extract the of value of an xml from log file and include it in the search?
Thanks
... View more
08-17-2016
06:29 AM
So, there is no way to extract the value of id and include it in the search field?
I do not want to put TEST001 in the search as the value changes every time a new id is created. I want to monitor the logs based on the value of id that gets created and written to the log.
... View more
08-16-2016
01:29 PM
Thanks Somesoni for your response.
my base search is this:
host="myserverhostname" rex "(^(?:[^>\n]*>){4}(?P<employee>\w+))" - This returns 'no results found'
I want to search for TEST001 in all the log files, how do i dynamically pass TEST001 in the search box?
I also tried this: host="myserverhostname" rex "\<id\>(?P<employee>[^\<]+)"
If i search with host="myserverhostname" | rex "(^(?:[^>\n]*>){4}(?P<employee>\w+))" , this returns all the logging and doesn't filter by id.
... View more
08-16-2016
12:33 PM
Hi,
I would like to extract the XML field value from an XML string from the log and include it in the search. What is the best way to do that?
Currently, whenever a request is posted, I am searching with the id, but I want to create a dynamic search such that whenever a new employee is added, I can see it in the Splunk search.
I tried the field extractor regex (^(?:[^>\n]*>){4}(?P\w+)) , but not sure how I can use this regex in the search box.
Sample XML:
<employee>
<id>TEST001</id>
</employee>
... View more
08-12-2016
01:53 PM
Yes splunkd is running as root. I do not see any errors in splunkd but 'Splunk App for Unix' is not receiving any input in splunk enterprise.
enabling apps/splunkforwarder/etc/apps/Splunk_TA_nix/bin/cpu.sh
enable successful
anything else that i should look for?
... View more
08-12-2016
01:12 PM
Thanks Muebel for your response. I do not see any errors in splunkd.log.
All log files are being monitored correctly on splunk enterprise but somehow do not see CPU information in 'Splunk App for Unix'.
... View more
08-12-2016
01:10 PM
Yes splunkd is running as a root. I see all the logs being updated in the splunk enterprise but do not see anything in 'Splunk App for Unix'.
I do not see any errors in splunkd.log.
... View more
08-11-2016
09:11 AM
Yes, I configured around 10 log files on the forwarder and I see all of them in the Splunk Enterprise.
You are right, SPLUNK_HOME was not set and after setting the splunk_home, I was able to enable the cpu.
./setup.sh --list-all
1) /apps/splunkforwarder/etc/apps/Splunk_TA_nix/bin/cpu.sh
enabled: *** disabled: interval: 30
I could perform search on the forwarder log file but do not see CPU usage on 'Splunk App for Unix'. I see the
forwarder hostname listed under Group.
which splunk log file that i should look for any errors?
... View more
08-10-2016
12:07 PM
Hi,
I have installed 'Splunk App for Unix' on the Splunk Enterprise (Windows OS) and installed 'Splunk Add on for unix and linux' on the linux forwarders.
Followed the document and created an inputs.conf under /apps/splunkforwarder/etc/apps/Splunk_TA_nix/local and added the below content:
[script://./bin/cpu.sh]
sourcetype = cpu
source = cpu
interval = 30
index = os
disabled = 0
Restarted both the forwarder and Splunk enterprise, Do not see any CPU usage on Splunk Enterprise though the host names are listed.
When i try to manually enable the cpu on forwarder, i am getting the below error.
[root@xxxxxxxxxxx bin]# ./setup.sh --interval cpu.sh 120
./setup.sh: line 50: /bin/splunk: No such file or directory
./setup.sh: line 834: /bin/splunk: No such file or directory
authenticated to
setting cpu.sh interval to 120
./setup.sh: line 110: /bin/splunk: No such file or directory
update failed
Did I miss any steps here?
... View more
08-10-2016
09:10 AM
Thank you very much. I installed the add-on on the splunk server and didn't know that it needs to be installed on the forwarder aswell.
I found the documentation. will install it and update here.. Thanks Again.
... View more
