The dojo of Splunk. Learn, share, teach, mentor.
Videos
Latest Activity
Michael Wilde replied to Nikita's discussion Count failures and success via transaction"How are these transactions linked together... by a field called "ID"? If so.. just build them with the field ID, and then use one of the MV commands to extract a field with success or failure in it. Paste some samples and…"
Siegfried Puchbauer's Discussions
Scripted Input - How to configure interval for one-shot data streams?
1 Reply
Hi ninjas ;-)I have a quite tricky question and I'm wondering if this is a bug with the script handling of splunk. I have a scripted input (which is a python script) that opens a tcp server socket…Continue
Tags: python, scripted-input
Started this discussion. Last reply by Michael Wilde Dec 22, 2009.
Siegfried Puchbauer's Page
Gifts Received
Siegfried Puchbauer has not received any gifts yet
Latest Activity
Siegfried Puchbauer replied to Patrick Swackhammer's discussion Regex For Identifying IP Addresses (To Extract Field)"Try this one:
(?\d+\.\d+\.\d+\.\d+)\(\d+\) \-> (?\d+\.\d+\.\d+\.\d+)\(\d+\)
it should extract the first ip as "src_ip" and the second one as "dest_ip"
Cheers, Siegfried"
Michael Wilde replied to Siegfried Puchbauer's discussion Scripted Input - How to configure interval for one-shot data streams?"We've got some data generators we use (internally for demos) as scripted inputs. For example, i have one that generates data for F5's Application Security Manager, so we can demo/develop the F5 app. Its entry in inputs.conf looks like…"
Siegfried Puchbauer posted a discussionScripted Input - How to configure interval for one-shot data streams?
Hi ninjas ;-)I have a quite tricky question and I'm wondering if this is a bug with the script handling of splunk. I have a scripted input (which is a python script) that opens a tcp server socket (listens on a tcp port). The script generates events and sends them to stdout. The problem is when I restart splunk or disable the scripted input via the manager the python script keeps running. I've tried to configure all interval settings that made sence IMO (-1, 0 and 1) but none of them worked.…See More
Michael Wilde left a comment for Siegfried Puchbauer"Sigfried..
Thanks for joining Splunk Ninja. Ask hard questions, we'll try to answer. Suggest videos, we'll try to shoot them... contribute if you can.
Michael Wilde
Splunk Ninja"
Profile Information
- Are you an existing splunk user?
- Licensed
- What do you do for your day job?
- IT Consultant
- Web / Blog Address
- http://siegfried.puchbauer.com/
Comment Wall (1 comment)
- At 12:06pm on December 17, 2009, Michael Wilde said…
- Sigfried..
Thanks for joining Splunk Ninja. Ask hard questions, we'll try to answer. Suggest videos, we'll try to shoot them... contribute if you can.
Michael Wilde
Splunk Ninja
© 2012 Created by Michael Wilde.
