| This has happened twice so far in a week. Users begin contacting me that they are unable to log in. Both times I ra... by tier2ops Explorer in Getting Data In 04-21-2010 1 6 | 1 | 6 | ||
| Hello, when using the following setup in props.conf, i was able to get the sourcetypes I want. [source::/var/splunk/... by alextsui Path Finder in Getting Data In 04-21-2010 2 1 | 2 | 1 | ||
| I have a set of logs that no longer appear to be being indexed. I had originally configured the monitor as follows...... by jheilman Explorer in Getting Data In 04-21-2010 0 2 | 0 | 2 | ||
| Hi Guys, We have built a small Splunk app to retrieve and index web usage info from multiple SQL databases. My Splun... by rbruno7 Explorer in Getting Data In 04-21-2010 0 6 | 0 | 6 | ||
| I have a Splunk forwarder instance that appears to be returning a value of 2 during start up. I am curious as to wh... by JHill Explorer in Getting Data In 04-20-2010 1 1 | 1 | 1 | ||
| Server is running 4.1. This does not seem to be an issue for default udp (that is, udp/514) messages. [udp://9514]... by gshah Engager in Getting Data In 04-20-2010 2 3 | 2 | 3 | ||
| I have a test Windows forwarder set up that is generating over 22,000 events relating to the splunk-optimize.exe proc... by jheilman Explorer in Getting Data In 04-20-2010 2 1 | 2 | 1 | ||
| We need to get Splunk to display date formats using the Australian format of dd/mm/yyyy rather than the US format whi... by the_wolverine Champion in Getting Data In 04-17-2010 1 2 | 1 | 2 | ||
| I have a test logfile I fed into Splunk: Apr 13 10:41:16 support05 kernel: [1815783.556088] usb 2-1: new full speed ... by jrodman Splunk Employee 0 3 | 0 | 3 | ||
| I let splunk monitor a directory of files. I found when any file got changed splunk will reindex all events in the fi... by tantingli Explorer in Getting Data In 04-17-2010 2 8 | 2 | 8 | ||
| How do you configure Splunk to monitor files within a VM? I installed Splunk within a VM and added a data input to m... by cmccoy Engager in Getting Data In 04-17-2010 1 3 | 1 | 3 | ||
| Odd behaviour with some udp syslog input from a Panorama device (palo alto management device) and ArcSight connector ... by Chris_R_ Splunk Employee 0 5 | 0 | 5 | ||
| Log entries have timestamps with Taiwan years. Taiwan year = current year-1911, so this year is 99. By default Splu... by dskillman Splunk Employee 2 3 | 2 | 3 | ||
| I'm a fairly new admin and extremely new at looking at reports/data. I have an issue with my server that I can't tra... by Rikakiah New Member in Getting Data In 04-17-2010 0 5 | 0 | 5 | ||
| Is there a way to export the data that isn't correct then re-import it using the correct sourcetype? If not, is there... by Jaci Splunk Employee 3 2 | 3 | 2 | ||
| Is there a search I can execute that will show me all the passwords that have been sent across the network in clearte... by Joels New Member in Getting Data In 04-15-2010 0 1 | 0 | 1 | ||
| How do I setup multiline log files in splunk, specifically we have a set of logs which are irregular, Log entries do ... by Josh Path Finder in Getting Data In 04-15-2010 3 6 | 3 | 6 | ||
| I have a file that I need to index twice. Specifically, I need it sent/indexed to two different indexes. How could... by Simeon Splunk Employee 1 4 | 1 | 4 | ||
| I have Splunk 4.0.10 64bit version running in Windows 2008 R2 64bit. I noticed that when Splunkd service is turned o... by despera Splunk Employee 2 1 | 2 | 1 | ||
| I've heard there are some REST endpoints that allow you to refresh objects (such as new dashboards, nav menus, etc...... by Dan Splunk Employee 2 3 | 2 | 3 | ||
| Hi, I just installed cisco_firewall_addon for version 4.1 of splunk and I am having some issues. I have an ASA and a ... by pillowhead Explorer in Getting Data In 04-13-2010 1 5 | 1 | 5 | ||
| Hello, System type: Linux We have splunk running on our centralized syslog-ng server. We then have other servers fo... by norfleetj Engager in Getting Data In 04-13-2010 1 4 | 1 | 4 | ||
| Would someone confirm the following observations regarding data input configuration via inputs.conf? when using wild... by hulahoop Splunk Employee 0 3 | 0 | 3 | ||
| Hi, I have syslog_ng server (sles 10). Everything is logged in this way: /var/log/HOSTS/xx-yy/hostname or ip/log fi... by mudricd Explorer in Getting Data In 04-13-2010 0 2 | 0 | 2 | ||
| I just installed Splunk 4.1 (configured to run on system accounts) and the first thing i did was add an input monitor... by jrich523 Path Finder in Getting Data In 04-12-2010 1 1 | 1 | 1 |