Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About swaro_ck
swaro_ck
Path Finder
Member since:
03-22-2012
11-11-2024
Community Statistics
| Posts | 16 |
| Solutions | 0 |
| Karma Given | 9 |
| Karma Received | 4 |
| Member Since | 03-22-2012 |
Activity Feed
- Karma Re: transforms.conf conditional statement for INGEST_EVAL for whunterj. 11-11-2024 04:36 AM
- Posted Re: Splunk Enterprise 9.1.3: Universal Forwarder can't be updated on Splunk Enterprise. 01-26-2024 12:09 AM
- Karma Re: Splunk Enterprise 9.1.3: Universal Forwarder can't be updated for kb_ama. 01-26-2024 12:02 AM
- Posted Re: Splunk Enterprise 9.1.3: Universal Forwarder can't be updated on Splunk Enterprise. 01-25-2024 04:46 AM
- Karma Re: How to fix MSSQL DB Connect Validation Error for Footoasis0868. 04-19-2023 10:51 PM
- Posted How to add colored buttons in a table? on Dashboards & Visualizations. 01-30-2023 08:33 AM
- Posted Re: How to add a lense icon to multiple tables with the same Javascript? on Dashboards & Visualizations. 11-14-2022 09:08 PM
- Karma Re: How to add a lense icon to multiple tables with the same Javascript? for kamlesh_vaghela. 11-14-2022 09:08 PM
- Posted How to add a lense icon to multiple tables with the same Javascript? on Dashboards & Visualizations. 11-14-2022 04:28 AM
- Karma Re: How do you prevent the map command from encapsulating the variable in quotes? for woodcock. 08-11-2022 01:54 AM
- Posted Multiple versions of Python for Scientific Computing Apps running on the same Searchhead on All Apps and Add-ons. 11-22-2021 10:33 PM
- Karma Re: Export to csv on click of button for gaurav_maniar. 07-13-2021 07:06 AM
- Karma Re: thawing out multiple buckets at once? for rafrey. 04-13-2021 02:27 AM
- Karma Re: OpenJDK support plans for DB Connect for sloshburch. 06-05-2020 12:50 AM
- Got Karma for Rest API Modular Input: Exception performing request:. 06-05-2020 12:49 AM
- Got Karma for Rest API Modular Input: Exception performing request:. 06-05-2020 12:49 AM
- Got Karma for Re: After upgrade to 6.5.0, why is my indexer reporting "ERROR UserManagerPro - Could not get info for non-existent user"?. 06-05-2020 12:48 AM
- Got Karma for Re: After upgrading deployment server to 6.5.1, "busyKeepAliveIdleTimeout...Consider raising timeout value" warning displays. Which configuration file do I edit to raise the timeout value?. 06-05-2020 12:48 AM
- Karma Feature Request: How to embed a dashboard (not a report) that is updated every hour in a webpage? for lquinn. 06-05-2020 12:47 AM
- Posted Re: OpenJDK support plans for DB Connect on All Apps and Add-ons. 08-13-2019 11:10 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 2 |
01-26-2024
12:09 AM
Great, thanks, that works.
... View more
01-25-2024
04:46 AM
We have exactly the same problem here. Tested today on a Windows 2016/2019 - UFW Update from 9.1.1 to 9.1.3 But a new installation is out of the question for us, as you will lose all checkpoints and a reread of all is the result.
... View more
01-30-2023
08:33 AM
I added 2 buttons (Delete + Update) to each row in a table. I used the example Script from from https://community.splunk.com/t5/Splunk-Search/How-do-you-add-buttons-on-table-view/m-p/384712 -> table_with_buttons.js.
In general all is working fine, the most time. But sometimes when I do a Browser Reload the Javascript is not running and the buttons are not colored. If I'm using one of the dropdowns and select an item, the buttons are colored immediately.
It should be looking like this:
I adapted the script a little bit and I ran always a https.//host/en-US/_bump after each change.
require([
'underscore',
'jquery',
'splunkjs/mvc',
'splunkjs/mvc/tableview',
'splunkjs/mvc/simplexml/ready!'
], function(_, $, mvc, TableView) {
var CustomRangeRenderer = TableView.BaseCellRenderer.extend({
canRender: function(cell) {
//console.log("Enable this custom cell renderer for field");
return _(["Update","Delete"]).contains(cell.field);
},
render: function($td, cell) {
//console.log("Add a class to the cell based on the returned value");
var strCellValue = cell.value;
if (cell.field === "Update") {
var strHtmlInput="<input type='button' style='background-color:DodgerBlue' class='table-button btn-primary' value='"+strCellValue+"'></input>";
} else if (cell.field === "Delete") {
var strHtmlInput="<input type='button' style='background-color:OrangeRed' class='table-button btn-primary' value='"+strCellValue+"'></input>";
}
$td.append(strHtmlInput);
}
});
mvc.Components.get('taskCollectionTable').getVisualization(function(tableView) {
// Add custom cell renderer, the table will re-render automatically.
tableView.table.addCellRenderer(new CustomRangeRenderer());
tableView.table.render();
});
});
And this part in the dashboard:
<row depends="$alwaysHideCSSPanel$">
<panel>
<html>
<style>
#taskCollectionTable table tbody tr td{
cursor: default !important;
}
#taskCollectionTable table tbody tr td input.table-button{
width: 83px !important;
position: relative;
left: 5%;
}
</style>
</html>
</panel>
</row>
What I'm missing or doing wrong?
Thanks
... View more
Labels
- Labels:
-
CSS
-
dashboard
-
javascript
-
simple XML
11-14-2022
09:08 PM
Thanks for your quick reply, works perfectly!
... View more
11-14-2022
04:28 AM
Hi,
Inspired from this post: https://community.splunk.com/t5/Dashboards-Visualizations/How-can-i-re-use-Java-scripts-form-one-table-to-another-tables/m-p/414861 I modifed my Javascript to add a lense icon in two tables. Same fieldname "Metrics" same icon "lupe.png" but 2 different tables. With Splunk 8.1 it's working without any error.
After the upgrade to 8.2.9 I get now this error message by accessing the App but the lens icons are still shown in both tables.
The output from the developer console:
TypeError: Cannot read property 'getVisualization' of undefined at eval (eval at <anonymous> ...
table_lupe.js
require([
'underscore',
'jquery',
'splunkjs/mvc',
'splunkjs/mvc/tableview',
'splunkjs/mvc/simplexml/ready!'
], function(_, $, mvc, TableView) {
var CustomIconRenderer1 = TableView.BaseCellRenderer.extend({
canRender: function(cell) {
return cell.field === 'Metrics';
},
render: function($td, cell) {
var icon = 'lupe';
// Create the icon element and add it to the table cell
$td.addClass('icon').html(_.template('<div class="myicon <%- icon%>"></div>', {
icon: icon,
}));
}
});
var CustomIconRenderer2 = TableView.BaseCellRenderer.extend({
canRender: function(cell) {
return cell.field === 'Metrics';
},
render: function($td, cell) {
var icon = 'lupe';
// Create the icon element and add it to the table cell
$td.addClass('icon').html(_.template('<div class="myicon <%- icon%>"></div>', {
icon: icon,
}));
}
});
mvc.Components.get('lupe1').getVisualization(function(tableView1){
// Register custom cell renderer, the table will re-render automatically
tableView1.addCellRenderer(new CustomIconRenderer1());
});
mvc.Components.get('lupe2').getVisualization(function(tableView2){
// Register custom cell renderer, the table will re-render automatically
tableView2.addCellRenderer(new CustomIconRenderer2());
});
});
table_lupe.css
/* Custom Icons */
td.icon {
text-align: center;
}
td.icon .lupe {
background-image: url('lupe.png') !important;
background-size:20px 20px;
}
td.icon .myicon {
width: 20px;
height: 20px;
margin-left: auto;
margin-right: auto
}
Maybe some one can help me find whats the problem.
Thank you.
... View more
Labels
- Labels:
-
CSS
-
dashboard
-
javascript
-
simple XML
11-22-2021
10:33 PM
After upgrading Splunk to v8.1.5 and updating the AWS App & Addon we are running in a version conflict with the Python for Scientific Computing App 3.0.0 for MLTK & 1.2 which should run on the same SH. MLTK 5 requires PSC 3 and the AWS App requires PSC 1.2 as documented in https://docs.splunk.com/Documentation/AWS/6.0.3/Installation/Hardwareandsoftwarerequirements MLTK Installed versions of PSC Installed AWS Apps As in the documentation URL above described I renamed the PSC folder and created the app.conf: /opt/splunk/etc/apps/Splunk_SA_Scientific_Python_linux_x86_64_awsapp/local/app.conf [package] id = Splunk_SA_Scientific_Python_linux_x86_64_awsapp Now it works for AWS but the MLTK cannot find the installed PSC 3. If I’m changing the directory to ZZZ_Splunk_SA_Scientific_Python_linux_x86_64_awsapp, the MLTK will work, but the AWS cannot find the PSC now. /opt/splunk/etc/apps/ZZZ_Splunk_SA_Scientific_Python_linux_x86_64_awsapp/local/app.conf [package] id = ZZZ_Splunk_SA_Scientific_Python_linux_x86_64_awsapp Is there a way to get this to work or is that an unsupported constellation?
... View more
Labels
08-13-2019
11:10 PM
Same issue here. In case of Suse Enterprise 12, DB connect 3.1.4 and OpenJDK 1.8 you have to use JRE_VENDOR_KEY='java.vm.specification.vendor'.
... View more
04-10-2019
06:48 AM
Hi, we stopped all activities within downloading instagram data, sorry.
... View more
02-07-2018
09:41 PM
No one an idea what's wrong?
... View more
02-07-2018
07:09 AM
Hi Johan,
I followed the documentation and added all the specific code for Instagram to the current release of rest_ta(responsehandlers.py). But I got the same errors. Thats the output from the search:
"2018-02-07T13:33:59.616+0100",ExecProcessor,ERROR,"message from ""python /opt/splunk/etc/apps/rest_ta/bin/rest.py"" Exception performing request:"
"2018-02-07T13:33:57.074+0100",ExecProcessor,ERROR,"message from ""python /opt/splunk/etc/apps/rest_ta/bin/rest.py"" Exception performing request:"
"2018-02-07T13:33:54.524+0100",ExecProcessor,ERROR,"message from ""python /opt/splunk/etc/apps/rest_ta/bin/rest.py"" Exception performing request:"
"2018-02-07T13:33:52.176+0100",ExecProcessor,ERROR,"message from ""python /opt/splunk/etc/apps/rest_ta/bin/rest.py"" Exception performing request:"
"2018-02-07T13:33:16.676+0100",Metrics,INFO,"group=per_source_thruput, series=""rest://instagram_tags_xxx1"", kbps=2.293122, eps=1.307874, kb=70.132812, ev=40, avg_age=0.000000, max_age=0"
"2018-02-07T13:33:16.676+0100",Metrics,INFO,"group=per_source_thruput, series=""rest://instagram_tags_xxx2"", kbps=2.293122, eps=1.307874, kb=70.132812, ev=40, avg_age=436236.250000, max_age=1734051"
"2018-02-07T13:33:16.676+0100",Metrics,INFO,"group=per_source_thruput, series=""rest://instagram_tags_xxx3"", kbps=2.293122, eps=1.307874, kb=70.132812, ev=40, avg_age=0.000000, max_age=0"
"2018-02-07T13:33:16.676+0100",Metrics,INFO,"group=per_source_thruput, series=""rest://instagram_xxx4"", kbps=2.293122, eps=1.307874, kb=70.132812, ev=40, avg_age=436233.750000, max_age=1734046"
"2018-02-07T13:32:58.799+0100",ExecProcessor,INFO,"message from ""python /opt/splunk/etc/apps/rest_ta/bin/rest.py"" Starting new HTTPS connection (1): api.instagram.com"
"2018-02-07T13:32:56.306+0100",ExecProcessor,INFO,"message from ""python /opt/splunk/etc/apps/rest_ta/bin/rest.py"" Starting new HTTPS connection (1): api.instagram.com"
"2018-02-07T13:32:53.803+0100",ExecProcessor,INFO,"message from ""python /opt/splunk/etc/apps/rest_ta/bin/rest.py"" Starting new HTTPS connection (1): api.instagram.com"
"2018-02-07T13:32:51.270+0100",ExecProcessor,INFO,"message from ""python /opt/splunk/etc/apps/rest_ta/bin/rest.py"" Starting new HTTPS connection (1): api.instagram.com"
"2018-02-07T13:32:46.306+0100",loader,INFO,"Limiting REST HTTP server to 1269 threads"
"2018-02-07T13:32:46.306+0100",loader,INFO,"Limiting REST HTTP server to 21333 sockets"
"2018-02-07T13:32:46.121+0100",ExecProcessor,INFO,"New scheduled exec process: python /opt/splunk/etc/apps/rest_ta/bin/rest.py"
"2018-02-07T13:32:46.121+0100",ExecProcessor,INFO,"New scheduled exec process: python /opt/splunk/etc/apps/rest_ta/bin/rest.py"
"2018-02-07T13:32:46.121+0100",ExecProcessor,INFO,"New scheduled exec process: python /opt/splunk/etc/apps/rest_ta/bin/rest.py"
"2018-02-07T13:32:46.121+0100",ExecProcessor,INFO,"New scheduled exec process: python /opt/splunk/etc/apps/rest_ta/bin/rest.py"
"2018-02-07T13:32:46.060+0100",ModularInputs,INFO,"Introspection setup completed for scheme ""rest""."
"2018-02-07T13:32:45.856+0100",SpecFiles,INFO,"Found external scheme definition for stanza ""rest://"" with 36 parameters: endpoint, http_method, request_payload, auth_type, auth_user, auth_password, oauth1_client_key, oauth1_client_secret, oauth1_access_token, oauth1_access_token_secret, oauth2_token_type, oauth2_access_token, oauth2_refresh_token, oauth2_refresh_url, oauth2_refresh_props, oauth2_client_id, oauth2_client_secret, http_header_propertys, url_args, response_type, streaming_request, http_proxy, https_proxy, request_timeout, backoff_time, polling_interval, sequential_mode, sequential_stagger_time, index_error_response_codes, response_handler, response_handler_args, response_filter_pattern, custom_auth_handler, custom_auth_handler_args, delimiter, cookies"
Kind regards,
Christian
... View more
01-18-2018
02:10 AM
2 Karma
I try to use the REST API to pull down data from Instagram. Everything seems to be ok, we can receive data, but only after a restart of Splunk or I click to the Save button in REST API UI and the configuration will be reloaded. In both situations all new connections triggered by the scheduler via rest.py is not working:
ERROR ExecProcessor - message from "python /opt/splunk/etc/apps/rest_ta/bin/rest.py" Exception performing request:
The inputs.conf is looking like this:
[rest://instagram_xxxxx]
auth_type = oauth2
backoff_time = 10
endpoint = https://api.instagram.com/v1/users/xxxxx/media/recent
http_method = GET
http_proxy = http://xxxxx
https_proxy = http://xxxxx
index = instagram
index_error_response_codes = 1
oauth2_access_token = xxxxx
oauth2_client_id = xxxxx
oauth2_client_secret = xxxxx
polling_interval = 60
response_handler = InstagramUserFeedEventHandler
response_type = json
streaming_request = 0
url_args = min_id=xxxxx,access_token=xxxxx,min_timestamp=0
sourcetype = _json
sequential_mode = 0
request_timeout = 30
I increased the logging level inside the rest.py to DEBUG and also for Splunk itself, but without any additional information that can help us.
I tried this with the rest_ta 1.3.6 delivered within the instagram app from Splunkbase and version 1.4. Same behavior. We are running this on a Splunk 6.5.3 installed on a SUSE Linux Enterprise Server 12 SP2 (x86_64).
Please, can someone help us with this issue?
Thanks!
... View more
06-28-2017
09:45 PM
They just told me that the problem was fixed in 6.5.3 and after the update the message was gone. I got no details what exactly the problem was.
... View more
02-07-2017
04:34 AM
1 Karma
Hi, in the meantime I got an answer from Splunk Support, they will fix it in 6.5.3
... View more
12-01-2016
10:10 PM
1 Karma
Yesterday I also opened a case, this is the answer from Splunk:
--snip
These are two new parameters introduced in Splunk 6.5.1
https://docs.splunk.com/Documentation/Splunk/6.5.1/Admin/Webconf
keepAliveIdleTimeout =
* How long, in seconds, that the SplunkWeb HTTP server allows a keep-alive
connection to remain idle before forcibly disconnecting it.
* If this number is less than 7200, it will be set to 7200.
* Defaults to 7200 seconds.
busyKeepAliveIdleTimeout =
* How long, in seconds, that the SplunkWeb HTTP server allows a keep-alive
connection to remain idle while in a busy state before forcibly disconnecting it.
* Use caution when configuring this setting as a value that is too large
can result in file descriptor exhaustion due to idling connections.
* If this number is less than 12, it will be set to 12.
* Defaults to 12 seconds.
This limited are reached when the SHs is pausing receiving the data because is busy processing it. Once SH is free again it will continue from where it stopped.
If everything else works fine ,you can ignore these, however if you want to remove these errors, try to increase the value for busyKeepAliveIdleTimeout to 30
--snip
I added busyKeepAliveIdleTimeout = 30 in server.conf on a test indexer and the message is gone. At the moment I cannot see negative side effects. But on this machine there is not enough load to say is it OK for that or not.
... View more
11-30-2016
06:28 AM
After the upgrade from 6.2.1 to 6.5.1 I also get the warning every 10 minutes on the indexer. According to the documentation this parameter could be changed in web-, server- or inputs.conf. https://docs.splunk.com/Special:SplunkSearch/docs?q=busyKeepAliveIdleTimeout+
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-11-2024
07:56 AM
|
Karma given to
