topic Re: splunk query in Security

splunk query

kreethu8 — Mon, 12 Jul 2021 16:04:09 GMT

Hi,

Can anyone help how to solve java stack trace log entries going across multiple splunk timestamps.

Re: splunk query

richgalloway — Mon, 12 Jul 2021 18:07:43 GMT

Please describe the problem in more detail. Include a sample stack trace and your current inputs.conf settings for that sourcetype.

Re: splunk query

kreethu8 — Mon, 12 Jul 2021 19:29:39 GMT

Hi ,

Thanks for the response,the application team said they are seeing multiple timestamps from their side and we made few changes in props.conf .they said all looks good and after few days they were back saying in java stack trace they can see multiple time stamp entries.when I said all looks good from our side they are saying in java stack trace they can see multiple timestamp entries.

Re: splunk query

richgalloway — Mon, 12 Jul 2021 19:35:17 GMT

***Include a sample stack trace and your current inputs.conf settings for that sourcetype.***