Submitted by northben on Fri, 11/06/2015 - 11:26
Well I don't care much for PowerShell, but sometimes it is a necessary evil. I needed to run some PowerShell scripts in parallel, so I wrote a wrapper to do this. Maybe it will help you also.
Features:
- You specify how many jobs to run in parallel
- When one job finishes, another will be started
Note: the Start-Job commandlet takes a few seconds to do its thing.
The repo lives here: https://github.com/northben/PowerShell-Parallel-Job-Runner
Submitted by northben on Thu, 11/05/2015 - 12:08
Normally, I prefer to send CSV or JSON data to Splunk. But sometimes XML can't be avoided. I recently needed to ingest an XML file, and through judicious use of 'MUST_BREAK_AFTER' and 'BREAK_ONLY_BEFORE' in props.conf, I was able to extract the events from the XML file that looked like this:
Submitted by northben on Wed, 11/04/2015 - 13:10
In this short tutorial I will show you how to create a dashboard table with dynamic columns. When the user selects the radio button toggles, the search does NOT run again -- only the display is updated. Demo: https://youtu.be/l-p83je4RgQ
I am including the full source code to the dashboard with this post for your review. But here's the secret sauce:
Submitted by northben on Mon, 10/26/2015 - 12:18
I've been having trouble indexing CSV files. In particular, CSV files from Tripwire. I'll show you the format and how I was able to index the files in Splunk
Node Name,Node Type,Policy,Parent Test Group,Test Name,Description,Element,Result Time,Result State,Actual Value
"192.168.1.1",Linux Server,"My Policy Name","My Test Group","My Test Name","My Test Description","Some Element",10/25/15 2:02 AM,passed,"ELEMENT=foo"
Here's my Props.conf stanza:
Submitted by northben on Sat, 10/03/2015 - 20:25
I needed to prevent a webpage from closing automatically. Turns out this is very easy to do with JavaScript!
Submitted by northben on Wed, 09/02/2015 - 08:53
I've been working with Splunk Enterprise a lot lately (and it's very powerful and easy to use!). In many situations, it is useful to show some metric compared to the same metric a month ago (or some other time period).
One way to accomplish this is with the community-supported Splunk app, Timewrap. I couldn't get Timewrap to output the data as I wanted, so instead here's the approach that I used.
Submitted by northben on Mon, 07/20/2015 - 13:46
I needed to send an ICAP request to a Symantec Antivirus server. Because ICAP is HTTP-like, but not quite HTTP, I could not use the wonderful requests library. So, here's what I did instead:
Submitted by northben on Sat, 07/18/2015 - 08:40
Let's say you need to update lots of keys in Amazon S3. If you have many objects in your S3 bucket, this can be quite slow. Of course, as a Python developer, you're using the nifty boto library. We can make update all of your keys much, much faster using multiple threads!
Submitted by northben on Sun, 05/03/2015 - 21:38
Background:
I was setting up a development copy of a client website on my computer the other day, and after I had cloned the repo, set up the database, and pip installed Django and all of the other python packages needed for the website, I faced a strange Exception coming from deep inside of one of my dependencies. After an embarrasingly long period of troubleshooting, I realized that when I specified my python dependencies, I neglected to include the version requirements for each package.
Problem:
Submitted by northben on Mon, 04/06/2015 - 13:51
I wanted to provide a super simple example of using Ned Batchelder's coverage.py for testing my Python unittest coverage. The thing that tripped me up at first is that I needed to call coverage.py in such a way to exercise Python's unittest framework. For example:
coverage run -m unittest discover;
coverage report -m;
Pages