Project

General

Profile

Feature #891

Ability to filter out data from the status summary that is not associated with an available input

Added by Luke Murphey about 10 years ago. Updated almost 10 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Luke Murphey
Target version:
1.1
Start date:
11/13/2014
Due date:
% Done:

100%

Description

See http://answers.splunk.com/answers/188627/website-monitoring-app-remove-website.html

History

#1 Updated by Luke Murphey almost 10 years ago

  • Target version set to 1.1

#2 Updated by Luke Murphey almost 10 years ago

  • Status changed from New to In Progress

This could likely be done with | rest and a join.

Something like:

sourcetype="web_ping" | join source [| rest /services/data/inputs/web_ping | search disabled=0 | fields title id | rex field=id ".*[/](?<name>[^/]*)" | eval name=urldecode(name) | eval source="web_ping://".urldecode(name)]

#3 Updated by Luke Murphey almost 10 years ago

  • Status changed from In Progress to Closed
  • % Done changed from 0 to 100

#4 Updated by Luke Murphey almost 10 years ago

This doesn't work on 6.0 because the checkbox input isn't available:

Traceback (most recent call last):
  File "/Library/Splunk/splunk6/lib/python2.7/site-packages/splunk/appserver/mrsparkle/controllers/__init__.py", line 277, in render_template
    return templateInstance.render(**template_args)
  File "/Library/Splunk/splunk6/lib/python2.7/site-packages/mako/template.py", line 283, in render
    return runtime._render(self, self.callable_, args, data)
  File "/Library/Splunk/splunk6/lib/python2.7/site-packages/mako/runtime.py", line 575, in _render
    **_kwargs_for_callable(callable_, data))
  File "/Library/Splunk/splunk6/lib/python2.7/site-packages/mako/runtime.py", line 607, in _render_context
    _exec_template(inherit, lclcontext, args=args, kwargs=kwargs)
  File "/Library/Splunk/splunk6/lib/python2.7/site-packages/mako/runtime.py", line 633, in _exec_template
    callable_(context, *args, **kwargs)
  File "/Library/Splunk/splunk6/share/splunk/search_mrsparkle/templates/dashboards/dashboard.html", line 84, in render_body
    % endfor
  File "/Library/Splunk/splunk6/lib/python2.7/site-packages/mako/runtime.py", line 498, in _include_file
    template = _lookup_template(context, uri, calling_uri)
  File "/Library/Splunk/splunk6/lib/python2.7/site-packages/mako/runtime.py", line 543, in _lookup_template
    raise exceptions.TemplateLookupException(str(e))
TemplateLookupException: Splunk has failed to locate the template for uri '/dashboards/elements/CheckboxInput.html'.

Also available in: Atom PDF