splunk / eventgen

Splunk Event Generator: Eventgen
Apache License 2.0
376 stars 180 forks source link

Support request: tests eventgen file don't fill up the index specified #470

Open Nicolas-Pellletier opened 1 year ago

Nicolas-Pellletier commented 1 year ago

Hello, I've followed the setup install of eventgen. After installing the PyPi i've tried to done this part (First Run) of the install tutoriel:

# Invoke python module
$ python -m splunk_eventgen -v generate tests/sample_eventgen_conf/replay/eventgen.conf.replay

# Alternatively, you can use the `splunk_eventgen` alias
$ splunk_eventgen -v generate path/to/eventgen.conf

I've got the following output:

nicop@nicop-IdeaPad-5-Pro-14ARH7:~/eventgen$ python3 -m splunk_eventgen -v generate tests/sample_eventgen_conf/replay/eventgen.conf.replay
2023-04-02 13:53:48 WINDBAG Event 10 of 12 randint 4
2023-04-02 13:54:00 WINDBAG Event 11 of 12 randint 6
2023-04-02 13:54:01 WINDBAG Event 12 of 12 randint 5
2023-04-02 13:53:56 WINDBAG Event 1 of 12 randint 7
2023-04-02 13:54:01 WINDBAG Event 2 of 12 randint 0
2023-04-02 13:54:02 WINDBAG Event 3 of 12 randint 7
2023-04-02 13:54:03 WINDBAG Event 4 of 12 randint 1
2023-04-02 13:54:04 WINDBAG Event 5 of 12 randint 7
2023-04-02 13:54:04 WINDBAG Event 6 of 12 randint 5
2023-04-02 13:54:05 WINDBAG Event 7 of 12 randint 7
2023-04-02 13:54:06 WINDBAG Event 8 of 12 randint 7
2023-04-02 13:54:07 WINDBAG Event 9 of 12 randint 10
2023-04-02 13:54:09 WINDBAG Event 10 of 12 randint 10

I've add the index = main in the eventgen.conf.replay but nothing appear in my main index. (The event count is still at 0)

I believed i've understood from this tutoriel how the configuration file works.

Note that this command: splunk_eventgen -v generate path/to/eventgen.conf return splunk_eventgen: command not found and this command python3 -m splunk_eventgen -v generate tests/sample_eventgen_conf/replay/eventgen.conf.replay works only when i'm in the eventgen directory otherwise it return /usr/bin/python3: No module named splunk_eventgen