Hi there,
I tried the command below as suggested from the documentation page, however, an error was prompted. Any ideas?
Thank you!
D:\Program Files\Splunk\etc\apps\TA-uas_parser\bin>"D:\Program Files\Splunk\"bin
\splunk cmd python update_cache.py
Traceback (most recent call last):
File "update_cache.py", line 4, in
results = uas_parser.updateData()
File "D:\Program Files\Splunk\etc\apps\TA-uas_parser\bin\uasparser.py", line 2
65, in updateData
raise UASException("Failed to get version of lastest data")
uasparser.UASException: Failed to get version of lastest data
The data source in question went subscription based and changed the URL.
Update_cache looks for a version number at: http://user-agent-string.info/rpc/get_data.php?key=free&format=ini&ver=y however, that now returns:
ERROR 404 - These data are not longer available on user-agent-string.info, please look at http://udger.com/resources/download
Once you purchase a subscription, you would need to modify the URLs in the uasparser.py file according to:
https://udger.com/support/documentation/?doc=31
Were you able to resolve this? I am on Linux but running into the same problem. Thanks in advance.
I am also getting the same error. Any one resolved this issue?
As a follow up, in my case, my splunk instance is actively accumulating log data in real time. Might this be part of the problem?