2010-09-02T23:06:46+00:00 http://www.splunkbase.com/api/apps/entries/?type=Clients 9 10 1 2010-02-25T18:04:09+00:00 http://www.splunkbase.com/api/apps/entries/TCP+or+UDP+Sending ndoshi 436 ndoshi 2010-02-03T18:01:15+00:00 2010-02-25T18:04:09+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/TCP+or+UDP+Sending 1.0.2 Integration Inputs Clients No Data 0 1 http://www.splunkbase.com/apps/TCP+or+UDP+Sending http://www.splunkbase.com/apps:screenshot/original/TCP+or+UDP+Sending/icon.jpg 36 36 http://www.splunkbase.com/apps:screenshot/original/TCP+or+UDP+Sending/screenshot.jpg 551 316 http://www.splunkbase.com/apps:screenshot/scaled/TCP+or+UDP+Sending/screenshot.jpg 551 316 http://www.splunkbase.com/apps:screenshot/thumb/TCP+or+UDP+Sending/screenshot.jpg 118 68 3.0.0 4.999.999

This distribution shows a simple approach to sending TCP or UDP data to Splunk using included python scripts. In addition, test programs have been provided to test TCP or UDP connections from one machine to another without using Splunk to make sure there are no firewalls or policies that prevent connections or receiving of data. This would be one way to debug why a forwarder cannot send data to a port on another machine. Gunzip and Untar the distribution into SPLUNK_HOME/etc/apps and read the README.txt for instructions.

2010-02-03T23:21:08+00:00 http://www.splunkbase.com/api/apps/entries/JMS+Receiver+for+Indexing ndoshi 86 ndoshi 2010-02-03T23:21:07+00:00 2010-02-03T23:21:08+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/JMS+Receiver+for+Indexing 1.0 Scripted Inputs Inputs Custom Processing Clients No Data 0 1 http://www.splunkbase.com/apps/JMS+Receiver+for+Indexing http://www.splunkbase.com/apps:screenshot/original/JMS+Receiver+for+Indexing/icon.jpg 36 36 http://www.splunkbase.com/apps:screenshot/original/JMS+Receiver+for+Indexing/screenshot.jpg 170 113 http://www.splunkbase.com/apps:screenshot/scaled/JMS+Receiver+for+Indexing/screenshot.jpg 170 113 http://www.splunkbase.com/apps:screenshot/thumb/JMS+Receiver+for+Indexing/screenshot.jpg 110 73 3.0.0 4.999.999

This distribution is a working example for indexing messages that are sent to JMS Queues. Although the example heavily relies on WebLogic Server 10.3, it could be modified to work with any JMS provider. Messages are delivered to a JMS Queue and Splunk is configured to run a scripted input once to call a JMS Queue consumer. Every message the consumer receives will be sent to standard output to be indexed. Although the distribution has been built on Windows, it should be able to run on any platform supported by Splunk and the JMS provider. To begin with, gunzip and untar the distribution into SPLUNK_HOME\etc\apps and follow the instructions in the README.txt

2009-02-23T18:53:53+00:00 http://www.splunkbase.com/api/apps/entries/Nagios+3.0.6 ymiranda 38 ymiranda 2009-02-23T18:53:53+00:00 2009-02-23T18:53:53+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Nagios+3.0.6 1.0 Themes Searches Search Commands Scripted Inputs Reports Other Integration Inputs Event Types Event Actions Clients Alerts No Data 0 0 http://www.splunkbase.com/apps/Nagios+3.0.6 0 0 0 0 0 0 0 0 3.0.0.0 3.999.999

integration fo a nagios3.0.6 xxxxxxxxxxxxxxxxxxx

2009-01-08T14:08:01+00:00 http://www.splunkbase.com/api/apps/entries/App+Deployment welbymcroberts 127 welbymcroberts 2009-01-08T14:07:56+00:00 2009-01-08T14:08:01+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/App+Deployment 1.0 Scripted Inputs Clients No Data 1 1 http://www.splunkbase.com/apps/App+Deployment 0 0 0 0 0 0 0 0 3.0.0.0 3.999.999

This application provides a way to distribute applications via the Deployment Server. Currently (3.4.3) the deployment server creates a tar file (as .bundle) for each application, and stores the configuration and discards the rest of the file. This script runs as a scripted input as a one-shot at startup. The script will go through each bundle that has been distributed to the instance, checks to see if a bin/ directory exists, checks the 'checksum' against the .checksum file within the instances etc/apps/APPNAME/ directory, if the file doesn't exist or the checksum does not equal that of the bundle the bin/ directory is extracted to the instances etc/apps/APPNAME/ directory.

2008-12-17T22:39:20+00:00 http://www.splunkbase.com/api/apps/entries/CheckPoint+OPSEC+LEA+Application+for+Solaris%7FSPARC Splunk 124 Splunk 2008-10-23T20:23:59+00:00 2008-12-17T22:39:20+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/CheckPoint+OPSEC+LEA+Application+for+Solaris%7FSPARC for Splunk 3.3 and 3.4 Integration Inputs Fields Event Types Clients No Data 0 1 http://www.splunkbase.com/apps/CheckPoint+OPSEC+LEA+Application+for+Solaris%7FSPARC 0 0 0 0 0 0 0 0 3.0.0.0 3.999.999

This application contains an OPSEC LEA application to drop into Splunk 3.3 or later, offering a client, event types, and field extractions. This version is compiled for Solaris. The application conforms with the Splunk common information model, meaning that it uses common field names for its data.

2008-12-17T20:53:24+00:00 http://www.splunkbase.com/api/apps/entries/CheckPoint+OPSEC+LEA+Application+for+Linux Splunk 865 Splunk 2008-10-23T20:26:17+00:00 2008-12-17T20:53:24+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/CheckPoint+OPSEC+LEA+Application+for+Linux for Splunk 3.3 and 3.4 Integration Inputs Fields Event Types Clients No Data 1 1 http://www.splunkbase.com/apps/CheckPoint+OPSEC+LEA+Application+for+Linux 0 0 0 0 0 0 0 0 3.0.0.0 3.999.999

This application contains an OPSEC LEA application to drop into Splunk 3.3 or later, offering a client, event types, and field extractions. This version is compiled for Solaris. The application conforms with the Splunk common information model, meaning that it uses common field names for its data.

2008-07-31T19:33:18+00:00 http://www.splunkbase.com/api/apps/entries/WordPress+Splunk+Demo+Widget andrea 63 andrea 2008-07-31T19:33:18+00:00 2008-07-31T19:33:18+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/WordPress+Splunk+Demo+Widget 1.0 Clients No Data 0 0 http://www.splunkbase.com/apps/WordPress+Splunk+Demo+Widget 0 0 0 0 0 0 0 0 3.0.0.0 3.999.999

A sample WordPress widget to do a search via the REST API and display the results in a Widget

2008-04-28T09:04:09+00:00 http://www.splunkbase.com/api/apps/entries/Splunk+Globe kordless 2001 kordless 2008-04-28T09:04:08+00:00 2008-04-28T09:04:09+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Splunk+Globe 1.0 Reports Clients No Data 0 1 http://www.splunkbase.com/apps/Splunk+Globe 0 0 0 0 0 0 0 0 3.0.0.0 3.999.999

Splunk Globe uses the Poly9 FreeEarth plugin. Splunk Globe queries a Splunk instance for the most recent IP addresses, then plots them on the globe. Updates occur in near real-time.

2007-09-05T18:30:16+00:00 http://www.splunkbase.com/api/apps/entries/SplunkWidget andrea 584 andrea 2007-08-20T15:13:06+00:00 2007-09-05T18:30:16+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/SplunkWidget 1.0 Searches Clients Alerts No Data 1 1 http://www.splunkbase.com/apps/SplunkWidget 0 0 0 0 0 0 0 0 3.0.0.0 3.999.999

Widget for the OS X Dashboard to list your saved searches and alerts. Double click on the uncompressed SplunkWidget to install, see the README.txt file for more info. Requires OS X Tiger, 10.4.3+