I have the following JSON structure in my events. I am trying to figure out an SPL Query to format the JSON in a table for a dashboard. The names of the WLCs could change, so WLC-1 will not always be the first entry or have the same name. Is it possible to make a dynamic table like the one below? Thank you. WLC-1 SSID1: 2 SSID2: 4   WLC-2 SSID1: 16 SSID3: 8   WLC-3 SSID2: 6 SSID3: 6 SSID4: 9   { WLC-1: { SSID1: 2 SSID2: 4 } WLC-2: { SSID1: 16 SSID3: 8 } WLC-3: { SSID2: 6 SSID3: 6 SSID4: 9 } }     ... View more

I am on a new install of Splunk 9.0.1 and add-on builder 4.1.1. - creating a python script with check pointing as a Data Collection input. - testing (with Test button) works as intended on the Edit Data Input - after publishing I am not able to create a new input to start collecting events - The script works as intended without the checkpoints - Code of the check point below: for service in r_json["response"]: state = helper.get_check_point(str(service["name"]) + str(service["appstack"])) if state is None: final_result.append(service) helper.save_check_point(str(service["name"]) + str(service["appstack"]), "Indexed") #helper.delete_check_point(str(service["name"]) + str(service["appstack"])) - Index="_internal" error are below ERROR ExecProcessor [1464594 ExecProcessor] - message from "/Applications/Splunk/bin/python3.7 /Applications/Splunk/etc/apps/splunk_assist/bin/uiassets_modular_input.py" RuntimeError: assist binary not found, path=/Applications/Splunk/etc/apps/splunk_assist/bin/darwin_x86_64/assistsup ERROR ExecProcessor [1464594 ExecProcessor] - message from "/Applications/Splunk/bin/python3.7 /Applications/Splunk/etc/apps/splunk_assist/bin/uiassets_modular_input.py" raise RuntimeError(f'assist binary not found, path={full_path}') ERROR ExecProcessor [1464594 ExecProcessor] - message from "/Applications/Splunk/bin/python3.7 /Applications/Splunk/etc/apps/splunk_assist/bin/uiassets_modular_input.py" File "/Applications/Splunk/etc/apps/splunk_assist/bin/assist/supervisor/context.py", line 41, in _test_supervisory_binary ERROR ExecProcessor [1464594 ExecProcessor] - message from "/Applications/Splunk/bin/python3.7 /Applications/Splunk/etc/apps/splunk_assist/bin/uiassets_modular_input.py" _test_supervisory_binary(base_path)   ... View more

When creating a Rest API data input for the Add-on Builder, and testing the REST API call I receive the following error: Traceback (most recent call last): File "/Applications/Splunk/etc/apps/TA-test/bin/testtest_1663829580_707.py", line 14, in <module> import input_module_testtest_1663829580_707 as input_module File "/Applications/Splunk/etc/apps/TA-test/bin/input_module_testtest_1663829580_707.py", line 29, in <module> from cloudconnectlib.client import CloudConnectClient File "/Applications/Splunk/etc/apps/TA-test/bin/ta_test/aob_py3/cloudconnectlib/client.py", line 8, in <module> from .configuration import get_loader_by_version File "/Applications/Splunk/etc/apps/TA-test/bin/ta_test/aob_py3/cloudconnectlib/configuration/__init__.py", line 1, in <module> from .loader import get_loader_by_version File "/Applications/Splunk/etc/apps/TA-test/bin/ta_test/aob_py3/cloudconnectlib/configuration/loader.py", line 15, in <module> from ..core.exceptions import ConfigException File "/Applications/Splunk/etc/apps/TA-test/bin/ta_test/aob_py3/cloudconnectlib/core/__init__.py", line 1, in <module> from .engine import CloudConnectEngine File "/Applications/Splunk/etc/apps/TA-test/bin/ta_test/aob_py3/cloudconnectlib/core/engine.py", line 6, in <module> from .http import HttpClient File "/Applications/Splunk/etc/apps/TA-test/bin/ta_test/aob_py3/cloudconnectlib/core/http.py", line 26, in <module> 'http_no_tunnel': socks.PROXY_TYPE_HTTP_NO_TUNNEL, AttributeError: module 'socks' has no attribute 'PROXY_TYPE_HTTP_NO_TUNNEL' Splunk Version: 8.2.2.1 Add-on Builder Version: 4.1.1 OS: Mac I found a post to a similar issue, but moving the socks.py one directory up did not fix the issue. https://community.splunk.com/t5/All-Apps-and-Add-ons/Splunk-TA-New-Relic-Insight-not-ingesting-data/m-p/528756 Creating a new Add-on still experienced the issue. Downloading Add-on Builder version 3.0.1 still experienced the issue. ... View more

I am looking to create a simple dashboard with fruit on the x-axis and amount on the y-axis based on the last event . When I try to list the amount, all the amounts get listed instead of the corresponding fruit. Any help or documentation is appreciated { "Results": [     {         "Fruit": "Apple",         "amount": 9     },     {         "Fruit": "Orange",         "amount": 37     },     {         "Model": "Cherry",         "Amount": 27     },   ] } ... View more