About twotimepad

twotimepad · ‎04-13-2021

When I pip install the splunk-sdk, it only creates a /splunklib directory. But, the READme on GitHub mentions adding the parent /splunk-sdk-python directory to PYTHONPATH, and some of the example snippets import code from the sibling utils module, neither of which exist via pip install. Is this the expected behavior and/or should the examples be updated? I am using Mac OSX High Sierra with Python 3.7, installed via Anaconda.

twotimepad · ‎10-10-2019

Thank you! Is there a reason to use values(Status) instead of last(Status) ? Reading the documentation of streamstats, it seems like last() should get the most recent value to compare against?

twotimepad · ‎09-27-2019

Is there a Splunk search idiom that I can use to get all the events in a dataset whenever a particular field value A changes over time with respect to another field value B? For example, if I have a dataset of users and their availability statuses, how can I get all the events (times) for when each user's status changes: t1 Bob available t2 Bob available t3 Bob busy t4 Bob busy t5 Bob busy t6 Bob available Is there a search result that will just return the events at t1, t3, and t6?

Posts	3
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎09-27-2019

Online Status	Offline
Date Last Visited	‎04-26-2021 07:35 PM

pip install does not create full splunk-sdk-python...

Help creating a search for events when a field val...

pip install does not create full splunk-sdk-python...

Re: Help creating a search for events when a field...

Help creating a search for events when a field val...