×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
snayak_splunk
Splunk Employee
Member since: ‎08-31-2016
‎04-02-2025
Community Statistics
Posts 3
Solutions 0
Karma Given 8
Karma Received 0
Member Since ‎08-31-2016
Activity Feed
View All

Python SDK Best Practices

by Splunk Employee in Splunk Dev
‎07-10-2018 05:57 AM
‎07-10-2018 05:57 AM
We are trying to develop an external application that pulls data from Splunk via the Python SDK. We had a couple of questions. whether we need to explicitly log-out of service calls (and if not what the implications are) Service(_BaseService): """A Pythonic binding to Splunk instances Do we need to explicitly logout of self.service.logout() we’re finding we’re needing to make a lot of splunk restarts to pick-up changes – any hints/tips/guidance on compiler interaction with Splunk (or even general Best Practice) would help! Also, do we have some documented Best Practices for the Python SDK? Any input would be greatly appreciated. ... View more

Monitoring Azure Storage Blobs - for performance p...

by Splunk Employee in All Apps and Add-ons
‎07-10-2018 05:40 AM
‎07-10-2018 05:40 AM
I am trying to monitor the Azure Storage Blobs and when we try logging into the application “Splunk Template for Microsoft Azure”, the dashboards for Storage (Usage-->Storage Accounts) displays the following error: Does anybody know what we are doing wrong? Or alternately, if you have some specific documentation on permissions to check or API calls to run to see if data is being fetched would be helpful. The exact error is: macro 'azure-metrics-storage' that cannot be found. Reasons include: the macro name is misspelled, you do not have "read" permission for the macro, or the macro has not been shared with this application. Click Settings, Advanced This macro didn’t exist at all. We tried creating the macro manually (to point to the index where storage data was written to and the mscs:storgage* sourcetype) and the dashboards just show null values. For configuring the Storage Accounts, we followed the instructions as defined in the Microsoft Cloud Services Add-On. These are showing up properly in the Azure Storage Account configuration page. For sourcetype mscs:storage:table we are seeing data only for below sources. Which seems to be missing any of the performance parameters as described in the dashboard. We have configured the Azure account with full permissions. So it should be returning all data. Also, we saw this one error in the log files that was quite old but thought of sharing. 2018-07-02 04:39:01,574 +0000 log_level=ERROR, pid=60847, tid=Thread-14300, file=mscs_storage_table_data_collector.py, func_name=collect_data, code_line_no=62 | [stanza_name="ICP-AzureVMmetrics" account_name="microiapsaiap062707500" table_name="WADMetricsPT1MP10DV2S20180425"] Error occurred in collecting data Traceback (most recent call last): File "/opt/splunk/etc/apps/Splunk_TA_microsoft-cloudservices/bin/splunktamscs/mscs_storage_table_data_collector.py", line 58, in collect_data self._do_collect_data() File "/opt/splunk/etc/apps/Splunk_TA_microsoft-cloudservices/bin/splunktamscs/mscs_storage_table_data_collector.py", line 107, in _do_collect_data marker=page_link File "/opt/splunk/etc/apps/Splunk_TA_microsoft-cloudservices/bin/splunktamscs/azure/storage/table/tableservice.py", line 685, in query_entities resp = self._query_entities(*args, **kwargs) File "/opt/splunk/etc/apps/Splunk_TA_microsoft-cloudservices/bin/splunktamscs/azure/storage/table/tableservice.py", line 749, in _query ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎04-02-2025 05:39 AM
Karma given to