Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Unable to use existing eventgen.conf from 5.x with 6.x or 7.x #398

Open
ryanfaircloth opened this issue May 26, 2020 · 1 comment
Open
Assignees
Labels
bug Malfunctioning Eventgen due to potential bug

Comments

@ryanfaircloth
Copy link
Contributor

Describe the bug
Regex syntax of stanzas are no longer supported

To Reproduce
See Splunk-TA-juniper

Expected behavior
stanzas should be applied based on regex match to sample name as with EG5.x

Actual behavior
No events are generated

Screenshots
If applicable, add screenshots to help explain your problem.

Sample files and eventgen.conf file
Please attach your sample files and eventgen conf file

Do you run eventgen with SA-eventgen?
Yes/No(No means you run eventgen with pip module mode)

If you are using SA-Eventgen with Splunk (please complete the following information):

  • OS: [e.g. Windows/Mac OS 10.14]
  • Browser [e.g. chrome, safari]
  • Eventgen Version [e.g. 22]
  • Splunk Version[e.g. 7.1.3]
  • What other apps you have installed in Splunk etc/apps?

If you are using eventgen with pip module mode (please complete the following information):

  • python version: [e.g. 2.6]
  • OS: [e.g. Windows10]
  • Virtual Env is used: Yes/No
  • Eventgen Version [e.g. 6.3.2]

Additional context
Add any other context about the problem here.

@ryanfaircloth ryanfaircloth added the bug Malfunctioning Eventgen due to potential bug label May 26, 2020
@satellite-no
Copy link

Is this planned to be fixed soon? Very annoying bug!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Malfunctioning Eventgen due to potential bug
Projects
None yet
Development

No branches or pull requests

5 participants