In the documentations, it shows how you can send param value to your java script (js) file but it does not show how to send to python file within the same module. I tried playing around with generateResults but got nowhere. Unless I missed something, I am lost. Examples 7 had something like this, but is limited to only 4 arguments: def generateResults(self, host_app, client_app, sid, count=1000, offset=0, entity_name='results'): I already included my param in the conf file: [param:startsize] required = False default = 8 label = This parameter defines start scale size. [param:endsize] required = False default = 70 label = This parameter defines end scale size. What is the proper way to pull the parameter value into python? ... View more

I have a long search that is 4 rows, however the only dynamic portion is the first row. I would like to automatically append the remaining 3 static rows to the search. I couldn't not find documentation on this. Simple Example below: The user will run this search within the search bar: index=_internal source=*metrics.log group=pipeline However I would like the following to automatically be added (in the background within the Advance XML file): | stats sum(cpu_seconds) as count by name | fields count, name Thank you in Advance ... View more

After setting up Load Balance on 2 mirrored Splunk instance I had 2 passwd files located locally on each instance in /opt/splunk/etc/passwd. To sync passwords among the 2 instances, I created a (Linux) symbolic link to a shared drive /opt/share/etc/passwd. However when I created a new account (on 1 instance), the symbolic link was lost and the file returned local status once more. How do sync credentials (passwd) on all splunk instances so I don't have to create an account on each instance manually? LDAP is currently not an option as I don't have resources for that now. Thank you in advance! ... View more