Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About jpvalenc
jpvalenc
Path Finder
Member since:
05-10-2017
02-18-2026
Community Statistics
| Posts | 14 |
| Solutions | 1 |
| Karma Given | 4 |
| Karma Received | 4 |
| Member Since | 05-10-2017 |
Activity Feed
- Posted Re: KV Store status is currently unknown- How to resolve this error? on Splunk Search. 09-21-2023 05:02 PM
- Tagged Re: KV Store status is currently unknown- How to resolve this error? on Splunk Search. 09-21-2023 05:02 PM
- Posted KV Store status is currently unknown- How to resolve this error? on Splunk Search. 03-22-2023 09:10 PM
- Tagged KV Store status is currently unknown- How to resolve this error? on Splunk Search. 03-22-2023 09:10 PM
- Tagged KV Store status is currently unknown- How to resolve this error? on Splunk Search. 03-22-2023 09:10 PM
- Karma Re: Why are my source types missing after upgrading to Splunk Enterprise 7.2? for asherer_splunk. 06-05-2020 12:50 AM
- Got Karma for What is causing an incomplete index list for role creation?. 06-05-2020 12:50 AM
- Got Karma for Re: What is causing an incomplete index list for role creation?. 06-05-2020 12:50 AM
- Got Karma for Re: What is causing an incomplete index list for role creation?. 06-05-2020 12:50 AM
- Karma REST API Modular Input: How can I make REST calls to MS Project Server 2013? for andrewtrobec. 06-05-2020 12:48 AM
- Karma Re: Using curl command from TA-Webtools for jkat54. 06-05-2020 12:48 AM
- Got Karma for Using curl command from TA-Webtools. 06-05-2020 12:48 AM
- Karma Re: How to create a drilldown selection to update form tokens on a dashboard? for michaeltokar. 06-05-2020 12:47 AM
- Posted Re: Why are my source types missing after upgrading to Splunk Enterprise 7.2? on Getting Data In. 01-16-2020 08:21 PM
- Posted Re: Why are my source types missing after upgrading to Splunk Enterprise 7.2? on Getting Data In. 01-16-2020 06:23 PM
- Posted Re: What is causing an incomplete index list for role creation? on Security. 11-20-2019 11:27 PM
- Posted Re: What is causing an incomplete index list for role creation? on Security. 11-20-2019 11:16 PM
- Posted What is causing an incomplete index list for role creation? on Security. 10-03-2019 09:28 PM
- Tagged What is causing an incomplete index list for role creation? on Security. 10-03-2019 09:28 PM
- Tagged What is causing an incomplete index list for role creation? on Security. 10-03-2019 09:28 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 1 | |||
| 0 | |||
| 1 |
09-21-2023
05:02 PM
No, I never did but it did stop happening so I have no idea what caused it.
... View more
- Tags:
- no
03-22-2023
09:10 PM
We're intermittently getting this error (so far twice in 2 weeks) when trying to use the lookup command on a kvstore.
The full error message is " External command based lookup <kv_store> is not available because KV Store status is currently unknown".
We only found the error through the logs a few hours after the failure because the scheduled search with the lookup command didn't run successfully. When ran manually or on its next schedule, the search was running fine. KV store is also working as intended upon checking.
I couldn't find information online on what the "unknown" status means regarding kv stores.
Has anyone else seen this error?
... View more
Labels
- Labels:
-
lookup
01-16-2020
08:21 PM
Thank you very much. That explains it better. 🙂
... View more
01-16-2020
06:23 PM
Hello,
I know this question has been a while but what exactly is wrong with those FIELDALIAS entries? We seem to have encountered the same error upgrading from 7.1.4 to 7.3.2.
... View more
Just an update, we were able to open a case for it and below were the given steps for a workaround:
Please follow the workaround steps to fix the issue.
A. on every affected SH edit
Go to the next path
/opt/splunk/share/splunk/search_mrsparkle/exposed/build/pages/enterprise/
Look the file: authorization_roles.js
B. Then find the following information.
this.indexListSearchJob.getResults().subscribe((results)
C. Add the following between the parentheses.
{ count: 1000 }
so that it looks like this:
this.indexListSearchJob.getResults({ count: 1000 }).subscribe((results)
D. Save file and hit the _bump endpoint:
https://<yourSplunk>/en-US/_bump on this point will depend if you are using secure UI add the s and if not you can log into like this
http://<yourSplunk>/en-US/_bump
However, I couldn’t find the string stated in bullet point B [this.indexListSearchJob.getResults().subscribe((results)] but I did find a similar string which says “this.indexListSearchJob.getResults().subscribe(function(results)” and that’s where I applied the workaround. Also, I tried opening the file with a text editor and saving it leading to a bunch of invalid characters to show up. I instead used the sed command to replace the text.
Hope this helps!
... View more
Hi All,
We recently upgraded to Splunk Enterprise vesion 7.3.1.1 and we're trying to add new roles to the instance. However, we noticed that on the index restriction section that not every index is being listed. It seems to only list the first 100 indexes.
Is this a bug for 7.3.1.1? Is there a workaround available for it?
... View more
12-14-2017
12:10 AM
Yeah that works for a pie chart but, unfortunately, I'll be showing a series of stacked column chart over a period of time.
... View more
12-13-2017
10:33 PM
I mean the data values. So the stacked chart is currently showing numbers 60 and 40, for example. I want it to show 60% and 40%. I want to add a "%" character on the data value.
... View more
12-13-2017
10:13 PM
Hello,
I'm trying to add a percent sign (%) on a stacked column chart's data label. I tried using eval but it's turning the values into a string and screws up the visualization. I'm trying to use javascript to add the "%" but I'm not having any luck. I can't seem to find the right property to change the data label. I'm only able to change the x-axis title, below is what I have:
require([
"splunkjs/mvc",
"splunkjs/mvc/simplexml/ready!"
], function(mvc) {
// Get the chart
var myChart = mvc.Components.get('myChart');
// Programmatically change a property in the Events table
myChart.getVisualization(function(chartView) {
chartView.settings.set({
"charting.axisTitleX.text": "My x-axis",
"charting.legend.placement": "bottom",
});
});
});
Any advice is greatly appreciated. Thank you!
... View more
05-14-2017
08:14 PM
I've updated and the curl command returns result now. Thank you. Just a question, does this support
NTLM authentication? I'm inputting my username/password but I'm only getting a '401 Unauthorized' in return.
... View more
05-11-2017
10:59 PM
Were you able to figure it out?
... View more
05-11-2017
07:27 PM
1 Karma
So I've been trying to use TA-Webtools app to get data from a Sharepoint site after some googling.
As a test, I’ve tried the example in the page: “| curl method=get ssl=true uri=localhost:8089/services/admin user=admin pass=changeme | table curl*”
But I’m not getting a result. I’m guessing that’s just a template and not an actual command but I’ve also tried with actual data: “| curl method=get ssl=true uri=”//_api/ProjectData/” user=”domain\user” pass=”password” | table curl*”
And I’m still not getting a result.
If it’s not too much to ask, would anyone happen to have a sample command from a public opensource website that will return results so that maybe I can reverse engineer it for my need?
Thank you so much for taking the time to read this and hope that someone out there can help.
... View more
- Tags:
- TA-Webtools
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-18-2026
11:54 PM
|
