2010-09-02T23:06:28+00:00 http://www.splunkbase.com/api/apps/entries?offset=10&count=10 122 10 11 2009-10-15T20:59:01+00:00 http://www.splunkbase.com/api/apps/entries/Use+Javamail+for+Scripted+Alerts ndoshi 437 ndoshi nimish@splunk.com 2009-01-26T23:42:50+00:00 2009-10-15T20:59:01+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Use+Javamail+for+Scripted+Alerts 1.0.2 Integration Alerts No Data 0 1 http://www.splunkbase.com/apps/Use+Javamail+for+Scripted+Alerts http://www.splunkbase.com/apps:screenshot/original/Use+Javamail+for+Scripted+Alerts/icon.jpg 36 36 0 0 0 0 0 0 3.0.0 4.999.999

This script runs as a scripted alert in Splunk to send mail to recipients whenever the alert conditions are met. It uses JavaMail to send the message. The intent is to provide a framework to control when email should be sent. Currently, the script uses Daily, Weekday, and Weekend to control what days the email alert should be sent. With this in mind the included Java program can be modified to also include what hours of the day email should be sent. The included code uses a US Local, which should be changed to the country of your choice. You can also use the full power of Javamail to send multi-part messages and attachments. Installation: Use tar zxvf to uncompress and untar the file and follow the instructions in the README. You can also modify the script to run on Windows.

2009-10-10T20:54:29+00:00 http://www.splunkbase.com/api/apps/entries/Web+Services+Stock+Quote+as+Scripted+Input ndoshi 418 ndoshi nimish@splunk.com 2008-12-09T18:06:56+00:00 2009-10-10T20:54:29+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Web+Services+Stock+Quote+as+Scripted+Input 1.1.1 Scripted Inputs Fields No Data 0 1 http://www.splunkbase.com/apps/Web+Services+Stock+Quote+as+Scripted+Input http://www.splunkbase.com/apps:screenshot/original/Web+Services+Stock+Quote+as+Scripted+Input/icon.jpg 36 36 http://www.splunkbase.com/apps:screenshot/original/Web+Services+Stock+Quote+as+Scripted+Input/screenshot.jpg 400 320 http://www.splunkbase.com/apps:screenshot/scaled/Web+Services+Stock+Quote+as+Scripted+Input/screenshot.jpg 400 320 http://www.splunkbase.com/apps:screenshot/thumb/Web+Services+Stock+Quote+as+Scripted+Input/screenshot.jpg 91 73 3.0.0 4.999.999

This distribution calls a stock quote web service with a list of stock symbols as input which is output to Splunk's indexer. The code makes use of the Apache Axis client library to call a web service as a scripted input to retrieve stock quote reports for stock symbols and use each response as an event stored in XML format. It is used as a demonstration for using web services as a scripted input. The work to call the web service for each stock symbol is \ done in the GatherStockQuote.java program. To install, use tar zxvf and place the stockquotes directory under SPLUNK_HOME/etc/apps/. Then read the README_StockQuote.txt for further configuration. You can use this to create your own time series data store for stock information and create reports. This ships with one field action to get detailed information on a symbol. (use xmlkv to extract the symbol field).

2009-10-10T20:27:56+00:00 http://www.splunkbase.com/api/apps/entries/Web+Services+Weather+as+Scripted+Input ndoshi 606 ndoshi nimish@splunk.com 2008-12-02T20:06:38+00:00 2009-10-10T20:27:56+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Web+Services+Weather+as+Scripted+Input 1.1 Scripted Inputs Fields No Data 2 1 http://www.splunkbase.com/apps/Web+Services+Weather+as+Scripted+Input http://www.splunkbase.com/apps:screenshot/original/Web+Services+Weather+as+Scripted+Input/icon.jpg 36 36 http://www.splunkbase.com/apps:screenshot/original/Web+Services+Weather+as+Scripted+Input/screenshot.jpg 935 798 http://www.splunkbase.com/apps:screenshot/scaled/Web+Services+Weather+as+Scripted+Input/screenshot.jpg 562 480 http://www.splunkbase.com/apps:screenshot/thumb/Web+Services+Weather+as+Scripted+Input/screenshot.jpg 86 73 3.0.0 4.999.999

This distribution calls a weather web service periodically with a list of cities as input which is output to Splunk's indexer. The code makes use of the Apache Axis client library to call a web service as a scripted input to retrieve weather reports for major cities and use each response as an event stored in XML format. It is used as a demonstration for using web services as a scripted input. You can choose your own cities to build your time series weather data store. The work to call the web service for each city country pair is done in the GatherWeather.java program. To install, unzip and un tar the distribution in SPLUNK_HOME/etc/apps and read the README_WS.txt file for further configuration.

2009-09-18T15:50:05+00:00 http://www.splunkbase.com/api/apps/entries/Sharepoint+MOSS+2007 ameyers 16 ameyers acm177@gmail.com 2009-09-18T15:50:05+00:00 2009-09-18T15:50:05+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Sharepoint+MOSS+2007 1.0 Searches Inputs Fields No Data 1 0 http://www.splunkbase.com/apps/Sharepoint+MOSS+2007 0 0 0 0 0 0 0 0 3.0.0 3.999.999

This application provides a source type for Microsoft Office Sharepoint Services 2007 logs.

2009-06-17T21:19:00+00:00 http://www.splunkbase.com/api/apps/entries/Splunk+for+OSSEC elazar 2198 elazar 2009-02-16T18:24:43+00:00 2009-06-17T21:19:00+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Splunk+for+OSSEC 0.4.3 Fields Event Types 4.0 6 1 http://www.splunkbase.com/apps/Splunk+for+OSSEC 0 0 http://www.splunkbase.com/apps:screenshot/original/Splunk+for+OSSEC/screenshot.jpg 191 81 http://www.splunkbase.com/apps:screenshot/scaled/Splunk+for+OSSEC/screenshot.jpg 640 271 http://www.splunkbase.com/apps:screenshot/thumb/Splunk+for+OSSEC/screenshot.jpg 118 50 3.0.0 3.999.999

Field extraction for OSSEC HIDS(http://www.ossec.net)

2009-05-18T23:22:47+00:00 http://www.splunkbase.com/api/apps/entries/Common+Event+Format+-+Field+Extractions raffy 1091 raffy 2007-12-06T02:11:27+00:00 2009-05-18T23:22:47+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Common+Event+Format+-+Field+Extractions 1.2 Fields No Data 0 1 http://www.splunkbase.com/apps/Common+Event+Format+-+Field+Extractions 0 0 0 0 0 0 0 0 3.0.0.0 3.999.999

CEF or the common event format is an event interoperability standard, defining a common syntax for communication among log generating devices and applications. This is an add-on to extract the fields of CEF messages.

2009-05-06T19:07:50+00:00 http://www.splunkbase.com/api/apps/entries/Nagios+sevice+check+to+monitor+the+size+of+daily+index ckotil 131 ckotil 2009-05-06T19:07:50+00:00 2009-05-06T19:07:50+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Nagios+sevice+check+to+monitor+the+size+of+daily+index 1.0 Reports Alerts No Data 1 0 http://www.splunkbase.com/apps/Nagios+sevice+check+to+monitor+the+size+of+daily+index 0 0 0 0 0 0 0 0 3.0.0.0 3.999.999

This Nagios service check allows a user to define a threshold in amount of bytes that will raise an alarm when the splunk daily index surpasses this amount.

2009-04-15T22:01:24+00:00 http://www.splunkbase.com/api/apps/entries/FireFox+Toolbar erik 763 erik 2009-04-15T22:01:24+00:00 2009-04-15T22:01:24+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/FireFox+Toolbar 1.1 Other No Data 1 0 http://www.splunkbase.com/apps/FireFox+Toolbar 0 0 0 0 0 0 0 0 3.0.0.0 3.999.999

Splunk toolbar for firefox v.2, v3 & v4 To Install, - download - uncompress - drag into ( or choose open ) in a firefox browser window - firefox will ask you if you want to install - do the right thing.

2009-03-27T19:50:26+00:00 http://www.splunkbase.com/api/apps/entries/Splunk+for+Solaris+Zones ogdin 184 ogdin 2009-03-27T19:50:26+00:00 2009-03-27T19:50:26+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/Splunk+for+Solaris+Zones 1.0 Scripted Inputs Reports No Data 0 1 http://www.splunkbase.com/apps/Splunk+for+Solaris+Zones 0 0 0 0 0 0 0 0 3.0.0.0 3.999.999

The Splunk for Solaris Zones application is similar to the system monitoring capabilities in the Splunk for UNIX app. Splunk for Zones uses zone capable options in commands like prstat and ps but also introduces the ability to grab statistics directly from running zones using zlogin.

2009-03-25T15:44:44+00:00 http://www.splunkbase.com/api/apps/entries/IRC+Splunk+Bot rataide 159 rataide 2009-02-20T17:13:31+00:00 2009-03-25T15:44:44+00:00 Free Creative Commons http://www.splunkbase.com/apps:license/IRC+Splunk+Bot 0.3 Scripted Inputs Integration Inputs Fields No Data 1 1 http://www.splunkbase.com/apps/IRC+Splunk+Bot 0 0 0 0 0 0 0 0 3.0.0.0 3.999.999

This application provides bi-directional integration between Splunk and an IRC Server. It logs and indexes the conversation from a channel as a scripted input and it replies to searches executed against that same Splunk server.