Yup.. Looks like DB Connect was the culprit for me (see below) Upgraded to newest version (unavailable at the time of issue) and works now.. Thanks ... View more

Yes, I had splunk_httpinput , but i think in my case it is more than just the http_collector, may move my issue to another answers topic. ... View more

It is included in with 6.3, so yeah I had it.. I tried to remove it, just in case that was causing some of the issues and it seems like it is tied pretty close to 6.3 now (getting errors about not being found). copied back and restarted still same issue for me. File "/opt/splunk/lib/python2.7/site-packages/splunk/entity.py", line 222, in getEntitiesAtomFeed serverResponse, serverContent = rest.simpleRequest(uri, getargs=kwargs, sessionKey=sessionKey, raiseAllErrors=True) File "/opt/splunk/lib/python2.7/site-packages/splunk/rest/init_.py", line 529, in simpleRequest raise splunk.ResourceNotFound(uri, extendedMessages=extractMessages(body)) ResourceNotFound: [HTTP 404] https://127.0.0.1:8089/servicesNS/admin/launcher/data/inputs/http; [{'code': None, 'type': 'ERROR', 'text': 'Application does not exist: splunk_httpinput'}] ... View more

I am running on 64 bit linux. I tried disabling a few apps installed and still didn't get any further. It will just hang when clicking Settings/Data Inputs (not all inputs expected listed)/Add Data.. Just get "loading" . Interestingly enough, when I click on Add data, I don't even get anything in web_services.log (just "loading" in the UI") & nothing out of the ordinary for splunkd_ui_access.log ... View more

I noticed this for quite a few data inputs that I have on a test box. I am missing HTTP event collector, and a bunch of others. I have files/TCP/UDP/database/scripts and that is all. in 6.3 Also, when I click "add data" my instance just hangs (web page). Everything works fine on splunk 6.2.X On 6.2.5 I had TCP/UDP/Scripts/Database/Automatic (from the app)/MQTT/REST/SNMP/Wiredata/Stream/URL/Web-pages under local inputs and forwarded inputs (windows/tcp/udp/etc). I am still trying to go through and see if one of the apps is incompatible and is breaking 6.3 by disabling apps (unless I get a better idea). ,I noticed this for quite a few data inputs that I have on a test box. I am missing HTTP event collector, and .When I click "add data" my instance just hangs.. works fine on splunk 6.2.X I have files/TCP/UDP/database/scripts and that is all. On 6.2.5 I had TCP/UDP/Scripts/Database/Automatic (from the app)/MQTT/REST/SNMP/Wiredata/Stream/URL/Web-pages under local inputs and forwarded inputs (windows/tcp/udp/etc). I am still trying to go through and see if one of the apps is incompatible and is breaking 6.3 by disabling apps (unless I get a better idea). ... View more

Hopefully to more than just IRC 🙂 Thanks for working on this quickly. ... View more

I am hoping that Splunk will send out a global communication (email) about this issue and include a set of versions that are affected and a timeline when they will be patched/updated. ... View more

One thing to be careful is that you remember that join is case sensitive (for some reason).. It doesn't look like this is the case in your example data, but something to keep in mind. Check out this posting. http://answers.splunk.com/answers/47699/case-insensitive-join ... View more

Any update on newer versions? Can splunk document this somewhere? looking for UF 5.0.5 ... View more

Splunk says you can upload just scripts to their site.. maybe here? https://www.splunk.com/index.php?module=roles&func=showloginform&artid=splunkbase&redirecturl=http://splunk-base.splunk.com/apps/share/ Built something useful with Splunk? Want to share it? Why not package it into an app and upload it? Uploads don't have to be complex. Even one useful script, saved search, or view can help others in the Splunk Community! ... View more

Did you ever create a script to do this? Willing to share? ... View more