Going through the book, got to the part that describes creation of an event type (Location 782 Kindle version). Doing this requires data but, when following the app creation process in the book, there is no data yet to search on. This being the case, I downloaded version 1.1 of the app and installed it on my splunk instance (v 6.2.3 Build 64376), restarted splunk and provided the meh API key. After that, the dashboard appears, but I get the yellow "!" triangle in each lower right corner. Hover over it to reveal "The lookup table 'meh_products' is invalid" and there is no data in any of the panels. Also tried version 1.0 of the app - same result.
One of my colleagues pointed out there there is nothing configured for the sdgAPI data input. We tried adding the meh API URL+API_KEY with no other options to no avail and also tried (more settings) adding json_no_timestamp as the sourcetype and pointed it at the splunk_developers_guide index also to no avail.
Please advise.
Earl Sammons
... View more