Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About tatdat171
tatdat171
Loves-to-Learn Lots
Member since:
02-26-2024
07-26-2026
Community Statistics
| Posts | 9 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 02-26-2024 |
Activity Feed
- Posted How to show ITSI KPi value by timerange in Glass Table on Splunk ITSI. 07-26-2026 11:26 PM
- Posted Re: How can move the knowledge object in Splunk by using Splunk SDK (Python) on Splunk Dev. 06-19-2024 08:47 AM
- Posted Re: How can move the knowledge object in Splunk by using Splunk SDK (Python) on Splunk Dev. 06-18-2024 01:11 AM
- Posted Re: How can move the knowledge object in Splunk by using Splunk SDK (Python) on Splunk Dev. 06-17-2024 11:08 PM
- Posted How can move the knowledge object in Splunk by using Splunk SDK (Python) on Splunk Dev. 06-17-2024 10:52 PM
- Posted Re: Client did not get correct server class in Splunk DS 9.2.0.1 on Splunk Enterprise. 03-19-2024 11:43 PM
- Posted Re: Client did not get correct server class in Splunk DS 9.2.0.1 on Splunk Enterprise. 03-06-2024 01:48 AM
- Posted Re: Client did not get correct server class in Splunk DS 9.2.0.1 on Splunk Enterprise. 03-05-2024 04:21 PM
- Posted Client did not get correct server class in Splunk DS 9.2.0.1 on Splunk Enterprise. 02-26-2024 07:54 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
07-26-2026
11:26 PM
I have created some simple KPI "Total Receiced Count", such as KPI query index="my_idex" service.name="product-order" message="*oder-ID*" | stats dc(trace.id) AS received_count I added this KPI in the glass table and it show the value as expected. However, when I change time range (in Global Time Range). The value of KPI did not change. MY question is: How I can get total received count by given time range? (like I can do with saved search and dashboard studio) I am using Splunk Cloud + ITSI vesion 10.3 Thank.
... View more
Labels
- Labels:
-
using ITSI
06-19-2024
08:47 AM
Thank @harsmarvania57, my bad. It worked as well. I want to write another script that used Splunk SDK, which does not depend on Splunk lib, or must run the script in Splunk server. Any way, I nearly finished with my the script by using SDK. Thank for your help and your script helped me a lot!
... View more
06-18-2024
01:11 AM
Hi @harsmarvania57 , I am very appreciate what you did with the script! In your script, you are using the python package "splunk" from splunk import mergeHostPath
import splunk.rest as rest
import splunk.auth as auth
import splunk.entity as entity But I can't find the package with pip install. could you give the correct name of package?
... View more
06-17-2024
11:08 PM
Thank @KendallW , that is good reference to CRUD with KOs in the Splunk but the script is out of date, some function did not work anymore. And he used REST API instead of SDK. I am asking about the Splunk SDK.
... View more
06-17-2024
10:52 PM
Hi everyone, I am writing the Python script to move the knowledge object to another app. For example, with the Lookup file: I can do it with the REST API endpoint servicesNS/<user>/<app_name>/data/lookup-table-files/<lookup_file_name/move But I can't find the function to do that with the Splunk Python SDK. https://docs.splunk.com/DocumentationStatic/PythonSDK/1.7.4/client.html#splunklib.client.Configurations If you have experience with Splunk SDK, please share it with me. Thank!
... View more
03-19-2024
11:43 PM
Hi @Hardy_0001 , Splunk team confirmed that is a bug on Splunk version 9.2.0.1. The Splunk Dev team is working on that. We can wait until they release fix version 😄
... View more
03-06-2024
01:48 AM
Yes, I have opened case on Customer support (same time as this post). But they are still troubleshooting.
... View more
03-05-2024
04:21 PM
Hi @Hardy_0001 , I am still facing with this issue. Could you please help me share your solution?
... View more
02-26-2024
07:54 PM
I am using Splunk Enterprise version 9.2.0.1 ( Upgraded from 9.0.5 to latest). Before the upgrade, the Splunk deployment server is working as well. When Splunk DS was upgraded to version 9.2.0.1, we saw issues with the client's server class. Client name: EC2AMAZ-XXXXX 1. Client in DS server before upgraded (9.0.5) Splunk tatdat171_0-1709004792308.png Server class: UF_input_WIN, UF_output 2. Client in DS server after upgraded (9.2.0.1) tatdat171_1-1709005462444.png Server class: UF_input_Linux, UF_output The server class "UF_input_Linux" only filters by machine type Linux (see section 3 below). I did not know why this server class is applied to this windows client 3. "UF_input_Linux" Server class configuration tatdat171_2-1709005764416.png 4. "UF_input_WIN" Server class configuration Client is listed in the match list on UF_input_WIN server class tatdat171_3-1709005887700.png Is that a bug? The filter Machine type does not work correctly. I did not change any thing on server class & app when upgraded Splunk DS. Does anyone know or meet this issue before?
... View more
Labels
- Labels:
-
using Splunk Enterprise
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
07-26-2026
11:21 PM
|
