Activity Feed
- Karma Re: Could not create Splunk settings directory at '/root/.splunk' for chanfoli. 01-03-2022 08:49 AM
- Got Karma for Re: Why am I getting the following error logging into Splunk? "500 Internal Server Error ResponseNotReady". 02-09-2021 05:47 AM
- Got Karma for Re: Adding tooltip to panel on a hover. 09-06-2020 12:47 PM
- Got Karma for Re: Adding tooltip to panel on a hover. 09-01-2020 01:18 PM
- Posted Re: Sending SNMP from Splunk to Netcool on All Apps and Add-ons. 08-03-2020 12:14 PM
- Karma Re: Converting relative time into epoch for the time range picker for niketn. 06-05-2020 12:49 AM
- Karma Re: Running one of two searches based on time picker selection for niketn. 06-05-2020 12:49 AM
- Karma Re: How to pass token during check and uncheck of the checkbox? for kyaparla. 06-05-2020 12:49 AM
- Karma Re: How can I add different tabs to each panel in my dashboard? for cmerriman. 06-05-2020 12:49 AM
- Karma Re: Error when importing Add-on in Add-on Builder for jkat54. 06-05-2020 12:49 AM
- Got Karma for Re: Splunk Add-on for Microsoft Cloud Services: Issue with configuration - "The resource does not support assignments of users or groups to Azure roles". 06-05-2020 12:49 AM
- Got Karma for Re: Splunk Add-on for Microsoft Cloud Services: Issue with configuration - "The resource does not support assignments of users or groups to Azure roles". 06-05-2020 12:49 AM
- Got Karma for Re: Splunk Add-on for Microsoft Cloud Services: Issue with configuration - "The resource does not support assignments of users or groups to Azure roles". 06-05-2020 12:49 AM
- Got Karma for Re: Splunk Add-on for Microsoft Cloud Services: Issue with configuration - "The resource does not support assignments of users or groups to Azure roles". 06-05-2020 12:49 AM
- Got Karma for Re: Splunk Add-on for Microsoft Cloud Services: Issue with configuration - "The resource does not support assignments of users or groups to Azure roles". 06-05-2020 12:49 AM
- Got Karma for Re: Splunk Add-on for Microsoft Cloud Services: Issue with configuration - "The resource does not support assignments of users or groups to Azure roles". 06-05-2020 12:49 AM
- Got Karma for Re: Splunk Add-on for Microsoft Cloud Services: Issue with configuration - "The resource does not support assignments of users or groups to Azure roles". 06-05-2020 12:49 AM
- Got Karma for Re: Splunk Add-on for Microsoft Cloud Services: Issue with configuration - "The resource does not support assignments of users or groups to Azure roles". 06-05-2020 12:49 AM
- Got Karma for Re: Splunk Add-on for Microsoft Cloud Services: Issue with configuration - "The resource does not support assignments of users or groups to Azure roles". 06-05-2020 12:49 AM
- Got Karma for Re: Splunk Add-on for Microsoft Cloud Services: Issue with configuration - "The resource does not support assignments of users or groups to Azure roles". 06-05-2020 12:49 AM
Topics I've Started
Subject | Karma | Author | Latest Post |
---|---|---|---|
0 | |||
0 | |||
13 | |||
0 |
08-03-2020
12:14 PM
Hello Rashi, Please find my answers below : This is not a configuration file. It is just information text to show the mapping within the code to what can be seen on the Netcool end. It looks like after 27389, there is a space which python code is unable to resolve. Could you please remove this and try again ?
... View more
03-30-2020
08:45 PM
2 Karma
Thank you so much. This and rectifying permissions seemed to fix my issue.
... View more
03-30-2020
08:44 PM
1 Karma
Thank you. This fixed my issue.
... View more
03-28-2020
08:08 PM
Is there any way to elaborate more on that solution ?
... View more
02-05-2020
05:11 PM
Thank you so much. This helped a ton !!
... View more
08-04-2019
09:59 AM
1 Karma
Thank you this helped me
... View more
04-29-2019
08:34 PM
Could you please tell me where you installed the add on ? Was it on heavy forwarders ? Also could you share a screenshot of the full error not releasing any sensitive data ?
... View more
04-04-2019
03:16 PM
If your splunk search reads
index=_internal | table host
And while configuring the alert, if you enter your host name to be $result.host$, Splunk would configure the trap to take the value of host in the search result to assign it to host name. $result.$ is only to specify how the resulting fields should be specified.
The OID is usually specified by the trap receiver. Per the link you shared, if the OID for Splunk Enterprise is "1.3.6.1.4.1.27389.1.1", for the SNMP Splunk Modular Alert configuration, set the
Enterprise OID to "1.3.6.1.4.1",
Specific OID to "27389" and
Specific Trap ID to 1.
... View more
04-04-2019
03:06 PM
As of right not there is no support available for sending SNMP Version 3 traps from Splunk to SNMP receiver in a windows environment
... View more
04-04-2019
10:43 AM
Can you please install wireshark on your receiver host, configure it to capture packets over the wifi or network interface, key in the word "snmp" and see if you're getting any traps ?
... View more
04-04-2019
10:40 AM
This issue has been addressed in the latest version 3.0
... View more
03-28-2019
08:46 AM
Simply beautiful
... View more
01-31-2019
06:47 AM
For postgreSQL
... View more
01-30-2019
01:44 PM
I am trying to use the Unity JDBC Driver for splunk : http://unityjdbc.com/splunk/splunk_jdbc.php
But I keep receiving the message that it found no tables. The documentation is not detailed enough to provide information about the setup from Splunk's side. Is there some jar file that needs to be added to $SPLUNK_HOME/etc/apps/dbx/bin/lib database_types.conf file ?
... View more
- Tags:
- connection
- dbx
- jdbc
01-15-2019
10:49 AM
Use the same code and source the tokenlinks.js file which you can copy from the dashboard examples app.
... View more
10-19-2018
07:07 AM
@niketnilay Thank you so much. Your solution is very elegant.
Is there a way to do this from an independent search window as opposed to within a dashboard ?
... View more
06-08-2018
08:30 AM
1 Karma
Change on line 23 :
<option name="status_indicator_app.status_indicator.showOption">1</option>
into
<option name="status_indicator_app.status_indicator.showOption">3</option>
... View more
06-08-2018
08:29 AM
If anyone can take a peek at this, I’d love some help. I have a need to show a status for a host, based on two sets of criteria. You can think of the criteria as a boolean truth table which I have incorporated using the eval command. The idea is to calculate a status based off of those two fields which appear to work just fine but I can’t get the trellis panels to recognize the color that’s been set. I found a similar example which I used as a model. Can anyone tell what I’m missing here?
... View more
05-17-2018
09:23 AM
isnull($$) in the conditional match totally resolved an issue of mine. Upvoted !!! Thank you so much 🙂
... View more
05-01-2018
01:33 PM
3 Karma
In order to make this work for multiple panels, you need to have different IDs everywhere. Those changes need to correspond to the changes in JavaScript as well.
require([
"splunkjs/mvc",
"splunkjs/mvc/tokenutils",
"jquery",
"splunkjs/mvc/searchmanager",
"splunkjs/ready!",
"splunkjs/mvc/simplexml/ready!"
],
function(
mvc,
TokenUtils,
$,
SearchManager
) {
//jQuery to access Panel with ID and use mvc.Components.get() function to get all Submitted Tokens.
//On mouseover() event set the show token for the Tooltip
$('#panel1').on("mouseover",function(){
var tokens = mvc.Components.get("submitted");
tokens.set("tokToolTipShow1", "true");
});
//On mouseout() event unset the show token for the Tooltip to hide the same.
$('#panel1').on("mouseout",function(){
var tokens = mvc.Components.get("submitted");
tokens.unset("tokToolTipShow1");
});
$('#panel2').on("mouseover",function(){
var tokens = mvc.Components.get("submitted");
tokens.set("tokToolTipShow2", "true");
});
//On mouseout() event unset the show token for the Tooltip to hide the same.
$('#panel2').on("mouseout",function(){
var tokens = mvc.Components.get("submitted");
tokens.unset("tokToolTipShow2");
});
}
);
<panel id="panel2">
----
<html id="htmlToolTip2" depends="$tokToolTipShow2$">
<style>
#htmlToolTip2{
margin:auto !important;
width: 20% !important;
}
</style>
<div class="tooltip fade top in">
<div class="tooltip-arrow"/>
<div class="tooltip-inner">$tokToolTipText2$</div>
</div>
</html>
----
<table>
<search>
<query>index=_internal sourcetype=*
| chart count sparkline(count, 1h) as trend by sourcetype
| sort -count
| head 5</query>
<earliest>$tokTime.earliest$</earliest>
<latest>$tokTime.latest$</latest>
<done>
<set token="tokToolTipText2">Tooltip2: Search returned $job.resultCount$ Results!</set>
</done>
</search>
<option name="drilldown">none</option>
</table>
... View more
05-01-2018
12:51 PM
1 Karma
Thank you ! This works like a charm
... View more
03-07-2018
03:21 PM
1 Karma
Saved my day !! Thank you very much. I made a workaround if events had no value like so :
Using 2 options :
SEDCMD to make it , generally not preferred because people don't want to mess with their data before being sent into Splunk.
Using another report feature in props like so :
.+?name=\"([^\">]+)\"()
... View more
02-01-2018
01:36 PM
Thank you ! This helped me.
... View more