Project

General

Profile

Feature #891

Ability to filter out data from the status summary that is not associated with an available input

Added by Luke Murphey over 9 years ago. Updated about 9 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Luke Murphey
Target version:
1.1
Start date:
11/13/2014
Due date:
% Done:

100%

Description

See http://answers.splunk.com/answers/188627/website-monitoring-app-remove-website.html

History

#1 Updated by Luke Murphey about 9 years ago

  • Target version set to 1.1

#2 Updated by Luke Murphey about 9 years ago

  • Status changed from New to In Progress

This could likely be done with | rest and a join.

Something like:

sourcetype="web_ping" | join source [| rest /services/data/inputs/web_ping | search disabled=0 | fields title id | rex field=id ".*[/](?<name>[^/]*)" | eval name=urldecode(name) | eval source="web_ping://".urldecode(name)]

#3 Updated by Luke Murphey about 9 years ago

  • Status changed from In Progress to Closed
  • % Done changed from 0 to 100

#4 Updated by Luke Murphey about 9 years ago

This doesn't work on 6.0 because the checkbox input isn't available:

Traceback (most recent call last):
  File "/Library/Splunk/splunk6/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/__init__.py", line 277, in render_template
    return templateInstance.render(**template_args)
  File "/Library/Splunk/splunk6/lib/python2.7/site-packages/mako/template.py", line 283, in render
    return runtime._render(self, self.callable_, args, data)
  File "/Library/Splunk/splunk6/lib/python2.7/site-packages/mako/runtime.py", line 575, in _render
    **_kwargs_for_callable(callable_, data))
  File "/Library/Splunk/splunk6/lib/python2.7/site-packages/mako/runtime.py", line 607, in _render_context
    _exec_template(inherit, lclcontext, args=args, kwargs=kwargs)
  File "/Library/Splunk/splunk6/lib/python2.7/site-packages/mako/runtime.py", line 633, in _exec_template
    callable_(context, *args, **kwargs)
  File "/Library/Splunk/splunk6/share/splunk/search_mrsparkle/templates/dashboards/dashboard.html", line 84, in render_body
    % endfor
  File "/Library/Splunk/splunk6/lib/python2.7/site-packages/mako/runtime.py", line 498, in _include_file
    template = _lookup_template(context, uri, calling_uri)
  File "/Library/Splunk/splunk6/lib/python2.7/site-packages/mako/runtime.py", line 543, in _lookup_template
    raise exceptions.TemplateLookupException(str(e))
TemplateLookupException: Splunk has failed to locate the template for uri '/dashboards/elements/CheckboxInput.html'.

Also available in: Atom PDF