Skip to content

Commit

Permalink
Merge pull request #39 from gsparks/PIE-450_Add_new_events_and_activi…
Browse files Browse the repository at this point in the history
…ties_sourcetypes

(PIE-450) Add puppet:events_summary and puppet:activity sourcetypes
  • Loading branch information
gregohardy authored Dec 14, 2020
2 parents 64097d7 + a551ee6 commit f439067
Show file tree
Hide file tree
Showing 9 changed files with 49 additions and 5 deletions.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ For detailed report generation, you will need to now install and configure the [

Advanced Configuration
----------------
All report views support using custom indexes for storing event data. They accomplish this with a series of advanced search macros. The queries assume each sourcetype can be stored in it's own index (facts, summary reports, detailed reports, bolt events, action events, Puppet Enterprise metrics).
All report views support using custom indexes for storing event data. They accomplish this with a series of advanced search macros. The queries assume each sourcetype can be stored in it's own index (facts, summary reports, detailed reports, bolt events, action events, activities, Puppet Enterprise metrics).

There is one top level macro, `puppet_index` which defaults to "", if you configure the HEC to use a different index and want all Puppet in that index, change that value here to be `index=puppetindexname`.

Expand Down
8 changes: 8 additions & 0 deletions README/CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,14 @@
Release Notes
==============

3.0.2:
New Features:
- puppet:events_summary and puppet:activity sourcetypes added.

Fixes:
- The searches that are used in the Overview tab to display resources under the "# of Resources" element and associated table used to display the number of reports. They have been corrected to display the number of resources.
- Development workflow updated.

3.0.1:
**Breaking Changes**:
- Alert Actions are now moved to https://github.com/puppetlabs/TA-puppet-alert-actions for better compatibility of this App for users who don't use or need the addons
Expand Down
2 changes: 1 addition & 1 deletion README/DEVELOPING.md
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ In order to load this module properly into the Splunk Add-On builder for develop
```
$ git checkout -b 'my working branch'
$ COPYFILE_DISABLE=1 tar -C .. --exclude=".git" --exclude="local/" --exclude="metadata/local.meta" --exclude="tmpdir" --owner=0 --group=0 --exclude=".DS_Store" --exclude=".gitignore" --exclude="default/.DS_Store" --exclude="default/data/.DS_Store" --exclude="default/data/ui/.DS_Store" --exclude=".vscode" -czvf tmpdir/TA-puppet-report-viewer.tar.gz TA-puppet-report-viewer
$ COPYFILE_DISABLE=1 tar -C .. --exclude=".git" --exclude="local/" --exclude="metadata/local.meta" --exclude="tmpdir" --exclude=".DS_Store" --exclude=".gitignore" --exclude="default/.DS_Store" --exclude="default/data/.DS_Store" --exclude="default/data/ui/.DS_Store" --exclude=".vscode" -czvf tmpdir/TA-puppet-report-viewer.tar.gz TA-puppet-report-viewer
To add your finished work back to the repo:
- Export the build from the Splunk Add-On tool
Expand Down
2 changes: 1 addition & 1 deletion app.manifest
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@
"id": {
"group": null,
"name": "TA-puppet-report-viewer",
"version": "3.0.1"
"version": "3.0.2"
},
"author": [
{
Expand Down
2 changes: 1 addition & 1 deletion default/app.conf
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ build = 3

[launcher]
author = Puppet, Inc.
version = 3.0.1
version = 3.0.2
description = Application with view Puppet data in Splunk

[ui]
Expand Down
10 changes: 10 additions & 0 deletions default/macros.conf
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,16 @@ iseval = 0
definition = `puppet_index`
iseval = 0

[puppet_events_index]
# add the name of your index here if it is not main index=puppet_index
definition = `puppet_index`
iseval = 0

[puppet_activity_index]
# add the name of your index here if it is not main index=puppet_index
definition = `puppet_index`
iseval = 0

[puppet_run_index]
# add the name of your index here if it is not main index=puppet_index
definition = `puppet_summary_index` OR `puppet_detailed_index` OR `puppet_facts_index`
Expand Down
18 changes: 18 additions & 0 deletions default/props.conf
Original file line number Diff line number Diff line change
Expand Up @@ -52,3 +52,21 @@ TRUNCATE = 0
category = Puppet Data
pulldown_type = 1

[puppet:events_summary]
AUTO_KV_JSON = 0
INDEXED_EXTRACTIONS = json
NO_BINARY_CHECK = 1
SHOULD_LINEMERGE = 0
TRUNCATE = 0
category = Puppet Data
pulldown_type = 1

[puppet:activity]
AUTO_KV_JSON = 0
INDEXED_EXTRACTIONS = json
NO_BINARY_CHECK = 1
SHOULD_LINEMERGE = 0
TRUNCATE = 0
category = Puppet Data
pulldown_type = 1

2 changes: 1 addition & 1 deletion local/app.conf
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ build = 4

[launcher]
author = Puppet, Inc.
version = 3.0.1
version = 3.0.2

[ui]
is_visible = 1
Expand Down
8 changes: 8 additions & 0 deletions metadata/default.meta
Original file line number Diff line number Diff line change
Expand Up @@ -41,4 +41,12 @@ owner = admin

[macros/puppet_all_index]
export = none
owner = admin

[macros/puppet_events_index]
export = none
owner = admin

[macros/puppet_activity_index]
export = none
owner = admin

0 comments on commit f439067

Please sign in to comment.