About BryantD

BryantD · ‎06-28-2011

Try using a wrapper script. The one described in the answer you link to is possibly more complex than what's needed for lookups. I solved this problem yesterday using a wrapper, as follows. wrapper.py: import os NEW_PYTHON_PATH = '/usr/bin/python' os.environ['PYTHONPATH'] = NEW_PYTHON_PATH my_process = '/opt/splunk/etc/apps/zgp/bin/lookup.py') os.execv(my_process, ())

BryantD · ‎06-14-2011

Works like a charm -- thanks!

BryantD · ‎06-14-2011

Some of the logs I'm tracking use source as a fieldname within the log. E.g.: 2011-06-14 17:17:48.028 s=10 source=7592 source_type=2 target=7589 target_type=2 I can probably arrange to have this changed if necessary, but is there any reasonable workaround using field transforms or aliases? I tried adding a simple alias via the manager (source=gsource) but no luck there.

Posts	3
Solutions	1
Karma Given	2
Karma Received	0
Member Since	‎05-11-2011

Online Status	Offline
Date Last Visited	‎06-05-2020 02:02 AM

source as fieldname

Re: How do I add a python module for external look...

Re: source as fieldname

source as fieldname