Splunk® Add-on Builder

Splunk Add-on Builder User Guide

This documentation does not apply to the most recent version of Splunk® Add-on Builder. For documentation on the most recent version, go to the latest release.

Known issues

Publication date Defect number Description
2016-03-30 TAB-626 A regex created by field extraction does not match events in the group.
2016-03-30 TAB-624 Testing modular input will fail when adding new variable and editing the code before restarting.
2016-03-30 TAB-623 Setup page settings file is not updated after renaming the project.
2016-03-27 TAB-606 In field extraction parsing, an error occurred for events with Chinese (UTF8) characters.
2016-03-23 TAB-593 The Add-on Builder does not support operations across multiple tabs or window. The Add-on Builder does not support multiple users.
2016-03-22 TAB-587 Before restarting Splunk Enterprise, disabling then enabling modular inputs will cause an HTTP 404 error.
2016-03-21 TAB-578 On Windows, KV exception occurs on parsing isc:bind:query samples.
2016-03-15 TAB-543 Validation is slow for some add-ons.
2016-03-15 TAB-537 Search head clustering is not supported.
2016-03-14 TAB-527 Proxy info in the setup page will not be used in the REST or shell command inputs.
2016-03-11 TAB-504 There is no limit to the number of concurrent validation jobs that are allowed. Running multiple validations at the same time consumes a lot of CPU resources. To work around this issue, validate one add-on or app at a time.
2016-03-11 TAB-503 Field extraction meta data is updated in re-parsing but the conf file is not updated until the user saves.
2016-03-10 TAB-495 Backup configuration files may not be restored if an exception occurred during validation.
2016-03-10 TAB-489 Parsing certain regex with certain strings can be very slow.
2016-03-04 TAB-425 Changing setup info will not take effect after restarting Splunk Enterprise. The web browser caches HTML and JS files to save network bandwidth and reduce load times for the page. To see the setup page changes immediately, clear the browser cache.
2016-03-01 TAB-411 Python doesn't support 100+ named capture groups.
2016-02-15 TAB-359 Modular Input Validator wrongly reports a fatal error for Bro IDS add-on inputs.conf.spec.
2016-02-01 TAB-300 Settings are added in the wrong order to the props.conf configuration file for the add-on.
2016-01-28 TAB-262 Cannot hardcode field values within regexes.
Last modified on 31 March, 2016
What's new   Third-party software credits

This documentation applies to the following versions of Splunk® Add-on Builder: 1.0.0


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters