Latest SplunkBase Applications (Search Commands in Technologies)

Splunk for Zope

stonor — Thu, 06 Nov 2008 07:19:03 +0000

Identify and analyze log files from the Zope web application server

Splunk for Citrix XenServer Management

Splunk — Thu, 16 Oct 2008 19:10:09 +0000

This Splunk application manages Citrix XenServers. It includes inputs, indexing, searches, reports, dashboards and field actions.

Reverse Name Resolution Search Script (DNS)

rataide — Tue, 02 Sep 2008 09:05:38 +0000

This search script (nslookup.py) will perform reverse name lookup on every IP from an event at search time.

AfterGlow Graphing

raffy — Wed, 13 Aug 2008 21:53:02 +0000

This new search processor enables the generation of link graphs through Splunk. Make sure you follow the instructions in the README (once installed, located in etc/apps/afterglow) to configure the application!

Perl PDF Report Creator "Search Command"

aspina — Mon, 14 Jan 2008 21:35:28 +0000

Create customizable PDF reports using this perl script, which includes the Intersplunk.pm module written by Andrew Hoying. Some knowledge of Perl required to install the Perl PDF modules available via CPAN.

Perfgraph

rdas — Fri, 12 Oct 2007 01:05:09 +0000

A Splunk performance visualization search processor. See my blog for more information.

getdevicetype

araitz — Tue, 11 Sep 2007 22:32:01 +0000

This search command will parse a csv file exported by network or systems device management software and match the hostnames/ip addresses in the file to host field values in you Splunk search, returning the new field devicetype for every match. The csv location is specified at the top of the script, and if you wish you can also alter the field matching to something other than "host" by changing the field variable in the script. The csv must be in the format "device_name,device_type". Thus, you can type: login | getdevicetype | where devicetype="cisco6500" to get only logins on cisco6500 devices or login | getdevicetype to get devicetype to display as a field below each event and be filterable and clickable like host and hosttag. or login | getdevicetype | top devicetype to get a report of number of events by devicetype.