Setup everything as per the docs, changed the user name and password but when click on Run button on the first example, it says "Error in logging in". When checked developer console, it resulted in this error page The path '/en-US/services/json/v2/services/auth/login' was not found. We have "Splunk 4.3 build 115073." installed. Please advice how I should make these examples run. ... View more

I have an app with 5-6 pages. Each page consist of 5-6 real time searches. Each page allowed to navigate to another pages in this app. Now if user opens a page, navigates to another page and then come back to the same page, it results in 15 real time search running for that user and though effectively it's only 5 jobs user is interested in. I want to kill these searches spawned via a page when user moves away from that page. I know it's going to be tricky but I will appreciate if someone can suggest a way to solve this problem. Thanks, ... View more

I have a universal forwarder listening on udp:12000 for messages from various processes and relaying it to splunk indexer. Universal forwarder are receiving messages from some local processes (running on the same machine) and some from remote processes. For remote process the host name in the messages are correct i.e. the IP for those machines but for local process it's 127.0.0.1. I understand the reason as the local processes are configured with 127.0.0.1/localhost. If I change the configuration (for the local processes) with the IP of the machine, then I see the IP in the messages. Is there anyway I can configure universal forwarder to replace the localhost/127.0.0.1 with the machine IP and still retain the host name for the remote processes as it is? ... View more

I have a submit button module containing search module and I want to execute the search only when user clicks on the button. As after search module I have to have some result module (JobProgressIndicator) for a valid view.xml but that is causing the search to run when user loads the page. Is there anyway so that search never runs when user loads the page? ... View more

I want to run different search when user clicks on the different row in the table. Is it possible? If not, then is it possible to choose an action based on the column type? ... View more

I set the default value for TimeRangePicker to 5 minute window and I also mentioned the isSticky to false for my view. For 'admin' user, It always shows selected time as '1 hour window' on page load no matter what I set the default value to. For the users which I created, It works fine. Is there anything I am am missing. PS: I created customized times.conf for my app. ... View more

SimpleResultTable passes the value for the fist column as click.value when user clicks on a row. Is it possible to have access of all the column values (click.value2, click.value3...) when user clicks on a row for the drill down search? 2) Is it possible to hide a column (first one) in the SimpleResultTable and then pass this hidden column value when user clicks on a row? ... View more

I need to use fillnull command but I don't have the exact field names before hand. All my fields starts (which I want to fill) starts with a common string i.e. err* . Though most of the commands in splunk do work with field name patterns e.g. table err* but fillnull err* is not working the way I want. Is there any other way to do this? ... View more

I am collecting some statistics based on the indexed data and saving the results in summary index. I am doing this every minute. I want to know if this collected data and store in summary index counts towards the index/day limit as per the license? ... View more

I am writing my own search command and writing a python scripts for that. To start with, I am reading the results and writing to a log file. I see the same results are being logged twice. I also printed the os.getpid() and see that was different in both the calls. I turned the streaming = true in commands.conf, I still see the script is being called twice but this time results were empty in one of the calls. Please let me know what should I do to fix this problem? import sys, os, gzip, csv, time, traceback import splunk.Intersplunk def logger(string): log.write(string + "\n") return 0 log = open(os.path.join(os.environ["SPLUNK_HOME"], 'var', 'log', 'splunk','my_results.log'), 'a') results = splunk.Intersplunk.getOrganizedResults() logger("called" + str(os.getpid())) logger((str(results)) splunk.Intersplunk.outputResults(results) ... View more