Admin Other

Category Activity

start tail monitoring windows event log upon Splunk install What should I attach to my install script if I want to start monitoring the event log in "tail" mode. I don't want t... by BunnyHop Contributor in Installation 03-27-2010 1 7	1	7
How to change Hostname of a splunk server In my environment we make clones of our linux servers so that we don't have to build out a server from scratch for ev... by Alan_Bradley Path Finder in Installation 03-20-2010 0 2	0	2
How do you get splunk to work with RHEL AS2.1? WHen I try to install it gives me a message that GLIBC-2.3 is required but there is no support to get this package fo... by Alan_Bradley Path Finder in Installation 03-19-2010 0 1	0	1
"The specified search is too large." Can somebody help me figure out what "too large" is? A query to count tag=pci entries by eventtype (and happens to be part of the application): tag=pci \| stats count by ... by Nate_Schmoll Engager in Knowledge Management 03-12-2010 4 5	4	5
What time format do I use when setting srchTimeWin (in authorize.conf)? I'm trying to configure a search Time Window for my Splunk roles. I've read the documentation but can't find instruc... by the_wolverine Champion in Installation 03-05-2010 1 1	1	1
AD is only returning 1000 entries. How do I get around this? I'm trying to configure LDAP auth for Splunk. I'm running into an issue where AD is only giving me 1000 entries and ... by the_wolverine Champion in Security 02-27-2010 2 2	2	2
Estimating storage requirements on a windows server In the installation manual it shows how once you have indexed some data by using the "du -shc hot_v*/rawdata" command... by Scott Engager in Installation 02-23-2010 1 1	1	1
How to direct certain sourcetypes into a non-default index When I've created a new index. how can I direct certain sourcetypes to be indexed in that new index, rather than into... by Alan_Bradley Path Finder in Security 02-10-2010 0 1	0	1
What salts the password hash? What private key pairs are used to generate the hashed passwords in authentication.conf or the passwd file? by matt Splunk Employee in Security 01-15-2010 1 1	1	1
historical data on a new installation I just installed splunk and indexed a log file with data that is from earlier this year, The summary dashboard shows ... by benstraw Splunk Employee in Knowledge Management 01-14-2010 1 1	1	1
How do I allow users to edit a view? If our users navigate to Manager --> Views they can see all the views, but they do not have permissions to edit or ad... by matt Splunk Employee in Security 01-14-2010 1 1	1	1