Splunk Search

R Project: How do I use commands involving paths with R language in Splunk?

dkoops
Path Finder

I want to use R to train a machine learning model, export it using saveRDS(), and then importing it again within Splunk using readRDS().
The problem is, I keep getting errors when trying to specify the path. This happens for any command involving paths; setwd, write.csv, etc.

Errors are similar:

command="r", R exited with code 1: Error: unexpected '/' in: " setwd(/" Execution halted

It probably has to do something with escaping the slashes, but any combination/amount of backslashes results in the same error..

Tags (3)
1 Solution

dkoops
Path Finder

Thanks for taking the time to look into my question, but it seems I figured it out. I was trying to do the following:

| r "
net = readRDS("C:\\User\\Documents\\R\\object.rds")
"

It went wrong with the double quotes within the double quotes; replacing all double quotes used in the R language with single quotes did (part of) the trick. (I should have been able to figure that out quicker, shame on me..)

It resulted in the following error however:

command="r", R exited with code 1: Error: '\U' used without hex digits in character string starting "'C:\U" Execution halted

It seems you also have to escape backslashes thrice for it to work (i'm guessing once for Splunk once for R?) Thus the working code being:

| r "
net = readRDS('C:\\\User\\\Documents\\\R\\\object.rds')
"

View solution in original post

0 Karma

dkoops
Path Finder

Thanks for taking the time to look into my question, but it seems I figured it out. I was trying to do the following:

| r "
net = readRDS("C:\\User\\Documents\\R\\object.rds")
"

It went wrong with the double quotes within the double quotes; replacing all double quotes used in the R language with single quotes did (part of) the trick. (I should have been able to figure that out quicker, shame on me..)

It resulted in the following error however:

command="r", R exited with code 1: Error: '\U' used without hex digits in character string starting "'C:\U" Execution halted

It seems you also have to escape backslashes thrice for it to work (i'm guessing once for Splunk once for R?) Thus the working code being:

| r "
net = readRDS('C:\\\User\\\Documents\\\R\\\object.rds')
"
0 Karma

lguinn2
Legend

Thanks for posting the error, but can you post the command string that generated the error?

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...