I migrated to v9.1.5 and have the TA-XLS app installed and working from a v7.3.6.  Commanding an 'outputxls' will generate a 'cannot concat str to bytes' error for the following line of the outputxls.py file in the app:  try: csv_to_xls(os.environ['SPLUNK_HOME'] + "/etc/apps/app_name/appserver/static/fileXLS/" + output)Tried encoding by appending  .encode(encode('utf-8') to the string -> not working Tried importing the SIX and FUTURIZE/MODERNIZE libraries and ran the code to "upgrade" the script: it just added the and changed a line --> not working  from __future__ import absolute_import   Tried to define each variable, and some other --> not working  splunk_home = os.environ['SPLUNK_HOME'] static_path = '/etc/apps/app_name/appserver/static/fileXLS/' output_bytes = output csv_to_xls((splunk_home + static_path.encode(encoding='utf-8') + output))   I sort of rely on this app to work, any kind of help is needed! Thanks!             ... View more

I have a report where it counts the events for the "next weekend", this meaning the following: 1.“Weekend” is considered the interval between Friday - 4 pm and Monday - 8 am. 2.: “Next” is to be considered with this rule: from Monday to Thursday, is the coming week and from Friday to Sunday, is the weekend after the next one. Example: before June, Friday 4th, the interval 4/6 - 7/6 is considered the next weekend, on Friday 4th the interval 4/6 - 7/6 becomes this weekend , 11/6 – 14/6 becomes next weekend. Issue: The report is scheduled at 8AM each day, but the Friday one is not considering the upcoming weekend as the "next weekend", rather taking the future weekend which will take place in 7 days. I need help in understanding how to change the logic of this report, to have it also on Friday filled with the next weekend results, meaning the first and second day right after. Hope it makes sense.   | eval start = strptime( 'Scheduled Start' ,"%Y-%m-%d %H:%M") | eval end = strptime( 'Scheduled End' ,"%Y-%m-%d %H:%M") | eval "Scheduled Start" = strftime(start , "%Y-%m-%d %H:%M") | eval "Scheduled End" = strftime(end , "%Y-%m-%d %H:%M") | eval nextFriday =if( strftime(now(),"%w")=="5" OR strftime(now(),"%w")=="6" OR strftime(now(),"%w")=="0",relative_time(now() , "+1w@w5+16h"), relative_time(now() , "@w5+7d+16h")) | eval nextMonday = relative_time(nextFriday , "+3d@d+8h") | eval nextMondayS = strftime(nextMonday , "%Y-%m-%d %H:%M") | eval nextFridayS1 = strftime(nextFriday , "%Y-%m-%d %H:%M") | where start >= nextFriday AND start <= nextMonday       ... View more