Splunk for Facebook

I'm sorry but I can't make it work!!! installed the app on my local macbook running Splunk 4.3.1; started the app and authenticate on Facebook with my FB account and authorized SplunkApp; returning to the app, I can see my Friends List, but if I try to open the "Updates in your Social Network" dashbaord, the dashboard opens, shows the empty maps but no data is retrieved from Facebook and stored into "facebook" index, o nothing is displayed in the dashboard.

Any ideas?!?

regards,

Marco

This app looks great but i'm having an issue with the geolocation not working.

I've made sure the URL and user/pass are correct in the SplunkSearchFacebook.py file but if I look in the chrome console I can see that the url /en-GB/custom/splunk_facebook/facebook/geoloc is returning an Internal Server Error 500 with he following in the logs:

    ACCEPT-ENCODING: gzip,deflate,sdch
2012-03-29 13:04:09,331 DEBUG   [4f744fb9537faf20241c50] _cplogging:55 - [29/Mar/2012:13:04:09] HTTP Traceback (most recent call last):
  File "/opt/splunk/lib/python2.7/site-packages/cherrypy/_cprequest.py", line 606, in respond
    cherrypy.response.body = self.handler()
  File "/opt/splunk/lib/python2.7/site-packages/cherrypy/_cpdispatch.py", line 25, in __call__
    return self.callable(*self.args, **self.kwargs)
  File "/opt/splunk/lib/python2.7/site-packages/splunk/appserver/mrsparkle/lib/routes.py", line 321, in default
    return route.target(self, **kw)
  File "<string>", line 69, in geoloc
  File "<string>", line 17, in __init__
  File "<string>", line 24, in get_auth_token
  File "/opt/splunk/lib/python2.7/site-packages/httplib2/__init__.py", line 1419, in request
    (response, content) = self._request(conn, authority, uri, request_uri, method, body, headers, redirections, cachekey)
  File "/opt/splunk/lib/python2.7/site-packages/httplib2/__init__.py", line 1171, in _request
    (response, content) = self._conn_request(conn, request_uri, method, body, headers)
  File "/opt/splunk/lib/python2.7/site-packages/httplib2/__init__.py", line 1147, in _conn_request
    response = conn.getresponse()
  File "/opt/splunk/lib/python2.7/httplib.py", line 1027, in getresponse
    response.begin()
  File "/opt/splunk/lib/python2.7/httplib.py", line 407, in begin
    version, status, reason = self._read_status()
  File "/opt/splunk/lib/python2.7/httplib.py", line 371, in _read_status
    raise BadStatusLine(line)
BadStatusLine: ''

Do you have any idea what this could be?

Hey Friends!

Is there an easy way to get Splunk for Facebook working with my test box running Splunk Free license since there's no user credentials?

This app is an excellent example of using custom UI. By simply adding .html files and .js scripts in your <app>/appserver/static directory, you can really decide on you how you want to present your data. This what makes it possible to implement the workflow for this app to query data from facebook.

Having known this ability, it also opens up the possibility to also generate custom UIs from the server side that leverage splunkweb. For example, app developers can implement your own custom controllers. For instance you can have <my app>/appserver/controllers/my.py. In there you can have something like:

import cherrypy

import splunk.appserver.mrsparkle.controllers as controllers
from splunk.appserver.mrsparkle.lib.decorators import expose_page
from splunk.appserver.mrsparkle.lib.routes import route
from splunk import auth

class MyController(controllers.BaseController):

@route('/')
@expose_page(must_login=True)
def get(self):
    '''/myapp/friends'''
    return self.render_template('myapp:/templates/friends.html')

Then you simply add a web.conf in your app.

> cat myapp/default/web.conf 
[endpoint:friends]

This is going to be extremely useful once you're interacting with splunked data. This is a fantastic start that that has lots of potential. It would be cool to see what types of data for splunk to index to produce interesting correlations with social data returned from facebook.

Nice job!