Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Getting Data In
Getting Data In
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
Search is index="_internal" source="*metrics.log" group="queue" | timechart perc90(current_size) by name
Results a...
by
MikeyG
Explorer
in
Getting Data In
04-07-2010
|
2
|
3
| ||
|
|
I'm trying to index a file on a mapped network drive, but I keep getting seeing 'Access is denied' in splunkd.log. I ...
by
Mick
Splunk Employee
in
Getting Data In
04-07-2010
|
4
|
1
| ||
|
|
On my old setup I had all syslogs going to syslog on the Splunk server, but now I'm doing a fresh setup with Ubuntu 9...
by
rogerssoftware
Explorer
in
Getting Data In
04-06-2010
|
1
|
4
| ||
|
I have a bunch of Lightweight Forwarders (LWF) forwarding to my central indexer. What happens to my events when there...
by
the_wolverine
Champion
in
Getting Data In
04-06-2010
|
3
|
4
| ||
|
|
I've just upgraded to 4.1 and now I'm getting an error when I search saying:
The lookup table 'sid_lookup' does no...
by
Alan_Bradley
Path Finder
in
Getting Data In
04-06-2010
|
3
|
7
| ||
|
|
How do I go about configuring splunk forwarders running on Linux to forward to a specific index for Linux-related inf...
by
cdavidy
Explorer
in
Getting Data In
04-06-2010
|
5
|
2
| ||
|
|
If the script to roll the hotDB to the warmDB is "| debug cmd=roll index=main", would there be one for rolling the wa...
by
BunnyHop
Contributor
in
Getting Data In
03-12-2010
|
4
|
2
| ||
|
|
In my office we have a script on our log servers that monitors the hosts sending logs and alerts us if a machine star...
by
thepocketwade
Path Finder
in
Getting Data In
03-19-2010
|
0
|
4
| ||
|
|
All of my events show up with gid=-1,uid=-1. Is this a bug or am I doing something wrong?
by
oreoshake
Communicator
in
Getting Data In
03-18-2010
|
1
|
3
| ||
|
|
UPDATE: This appears to be a bug specifically related to 4.0.10. The following is a work around in system/local/input...
by
oreoshake
Communicator
in
Getting Data In
03-30-2010
|
1
|
3
| ||
|
|
I have lots of hosts in my environment, but I only want to search across a few of them from time to time. Can I someh...
by
maverick
Splunk Employee
in
Getting Data In
03-30-2010
|
1
|
2
| ||
|
|
We have an global application hosted within a VM environment feeding a common Splunk index server. However the server...
by
matt_1
Explorer
in
Getting Data In
03-29-2010
|
0
|
2
| ||
|
|
Everytime I run a splunk command on windows 7, the command runs in a separate window and closes before I can see what...
by
oreoshake
Communicator
in
Getting Data In
03-29-2010
|
1
|
2
| ||
|
|
Hai There,
I am dealing with a forwarder to indexer which is reading a kiwi directory with several types of device...
by
Starlette
Contributor
in
Getting Data In
03-28-2010
|
1
|
2
| ||
|
|
Does a sinkhole work on all types of forwarders?
by
Michael_Wilde
Splunk Employee
in
Getting Data In
03-29-2010
|
3
|
1
| ||
|
|
How to disable hostname chaining? Splunk picks the chained hostname rather than the original.
by
zliu
Splunk Employee
in
Getting Data In
03-26-2010
|
0
|
1
| ||
|
|
I have a light forwarder (v4.0.7) I want to change this to a forwarder instead of a light forwarder. The reason being...
by
Alan_Bradley
Path Finder
in
Getting Data In
03-25-2010
|
0
|
3
| ||
|
|
We're upgrading our forwarders and we always get the warning that outputs.conf cannot be migrated. However, simply mo...
by
oreoshake
Communicator
in
Getting Data In
03-19-2010
|
0
|
1
| ||
|
|
When we build 2 Splunk indexing servers for High Availablity, 2 Splunk indexing servers may receive the same log data...
by
Alan_Bradley
Path Finder
in
Getting Data In
03-19-2010
|
0
|
1
| ||
|
|
We plan to use Splunk to keep log for several java application including web server like Tomcat. Those application ar...
by
Alan_Bradley
Path Finder
in
Getting Data In
03-19-2010
|
2
|
1
| ||
|
|
Why would there be a gap of logged events in metrics.log between 01-21-2010 15:47:39.421 and 01-22-2010 08:53:28.231 ...
by
hulahoop
Splunk Employee
in
Getting Data In
01-23-2010
|
0
|
5
| ||
|
|
This is related to an earlier question: http://answers.splunk.com/questions/490/why-do-variations-in-sourcetype-appea...
by
Glenn
Builder
in
Getting Data In
03-18-2010
|
2
|
5
| ||
|
|
I'm concerned about CLI and REST authentication tokens. How long do those stay valid and is it configurable?
by
Alan_Bradley
Path Finder
in
Getting Data In
03-19-2010
|
2
|
1
| ||
|
|
Are queries that go to two index servers in different time zones handled correctly? I'm assuming it does, but want to...
by
Alan_Bradley
Path Finder
in
Getting Data In
03-19-2010
|
0
|
1
| ||
|
|
I do not see in any of the manuals or Help how to add host servers. You label the targets as Host on the main page bu...
by
Alan_Bradley
Path Finder
in
Getting Data In
03-19-2010
|
1
|
1
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Top Labels
-
add-on
2 -
administration
10 -
AIX
1 -
audit
1 -
blacklist
86 -
CLI
1 -
configuration
20 -
CSV
198 -
data
383 -
development
5 -
encryption
1 -
eval
2 -
field extraction
509 -
fields
4 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
844 -
host
146 -
HTTP Event Collector
394 -
index
500 -
indexer
627 -
indexing performance
1 -
inputs.conf
764 -
installation
3 -
intermediate forwarder
128 -
introduction
3 -
JSON
356 -
kvstore
1 -
Linux
410 -
login
1 -
Mac
26 -
metadata
1 -
metrics
2 -
modular input
168 -
monitor
292 -
Other
947 -
proactive Splunk component monitoring
2 -
props.conf
880 -
regex
5 -
saved search
2 -
scripted input
227 -
search head
2 -
source
266 -
sourcetype
454 -
Splunk Enterprise
1 -
splunk-assist
2 -
subsearch
1 -
syslog
289 -
time
199 -
transforms.conf
516 -
troubleshooting
12 -
universal forwarder
1,442 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
13 -
whitelist
60 -
Windows
546 -
XML
88
- « Previous
- Next »
Get Updates on the Splunk Community!
Developer Spotlight with Paul Stout
Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...
State of Splunk Careers 2024: Maximizing Career Outcomes and the Continued Value of ...
For the past four years, Splunk has partnered with Enterprise Strategy Group to conduct a survey that gauges ...
Data-Driven Success: Splunk & Financial Services
Splunk streamlines the process of extracting insights from large volumes of data. In this fast-paced world, ...
