Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
HI,
I have a few large directories that take a long time for Splunk to start indexing after a restart. Is there a...
by
chrisboy68
Contributor
in
Getting Data In
10-30-2015
|
0
|
1
| ||
|
|
I have files on multiple servers that I need to log that are housed in a directory where the path includes the system...
by
jking81
Explorer
in
Getting Data In
10-30-2015
|
0
|
1
| ||
|
As the Cluster Deployments are reaching maturity, we are planning to add a new Cluster Peer/Indexer to the existing C...
by
rbal_splunk
Splunk Employee
in
Getting Data In
07-14-2015
|
1
|
2
| ||
|
|
My Splunk environment has two indexers running on VMs with Linux OS, and I want to create an indexer cluster. My thir...
by
Julieda
Explorer
in
Getting Data In
10-29-2015
|
0
|
1
| ||
|
|
We output .csv file from splunk.
When we test on a test machine, the order of CSV file fields is "Action", "Return...
by
xiyangyang
Path Finder
in
Getting Data In
10-28-2015
|
0
|
1
| ||
|
Hi,
I'm already monitoring new files in a directory, but I would like to monitor the changes in the files too. Her...
by
edrivera3
Builder
in
Getting Data In
09-24-2015
|
0
|
2
| ||
|
We have a vanilla install, just one stand alone Splunk Server. I am wanting to filter select events from one source f...
by
bfnpmsz
New Member
in
Getting Data In
10-27-2015
|
0
|
10
| ||
|
|
Hi,
Here is my situation (and I know it isn't ideal, but I have to work with it for now)
I have scripts that pr...
by
splunkmasterfle
Path Finder
in
Getting Data In
10-29-2015
|
0
|
1
| ||
|
|
Hey,
We have a regular access log file with fields named UserAgent and Method. Is it possible to send all data in...
by
Norling80
Path Finder
in
Getting Data In
10-28-2015
|
0
|
3
| ||
|
I would just like to confirm my syntax... I've read a bunch of postings, I've RTFM, but none have an actual sample or...
by
Michael
Contributor
in
Getting Data In
10-29-2015
|
0
|
1
| ||
|
|
When my company first purchased Splunk 4.x fschange was not deprecated and was one of the reasons that we have Splunk...
by
ng1p
Path Finder
in
Getting Data In
03-18-2014
|
3
|
6
| ||
|
Hello,
I created a new sourcetype and there is no props.conf in splunk/etc/system/local..
Where is it stored? o...
by
dkeck
Influencer
in
Getting Data In
10-29-2015
|
0
|
1
| ||
|
|
Hi all,
I add the search peers by using the CLI commands in a script. When I check the Distributed Management Cons...
by
kimche
Path Finder
in
Getting Data In
10-22-2015
|
0
|
1
| ||
|
Every hour our ISP send to us the Exchange logs file. What is the best solution to analyze this?
by
arkonner
Path Finder
in
Getting Data In
10-28-2015
|
0
|
1
| ||
|
|
Is it possible to archive frozendbs to tape and pull that data back for splunk to read at a later date?
For exampl...
by
scott778
Explorer
in
Getting Data In
10-28-2015
|
0
|
3
| ||
|
|
Hello,
I have user event logs that I'm trying to ingest over TCP. Every event is a JSON like this:
{key1:v1,......
by
dknb
Engager
in
Getting Data In
10-22-2015
|
0
|
6
| ||
|
Hi all,
I'm managing my apps deployed through forwarder management using git. When running a scheduled "git pull" ...
by
schose
Builder
in
Getting Data In
10-27-2015
|
1
|
4
| ||
|
|
I'm trying to bring in Cisco CDR files for some very basic splunk searches. The standard CDR format has a header row,...
by
AaronAltonKinro
Path Finder
in
Getting Data In
10-08-2015
|
0
|
15
| ||
|
Hi,
Is there a best practice way of keeping a set of indexes replicated between two independent Splunk installatio...
by
otan1010
Explorer
in
Getting Data In
10-26-2015
|
0
|
16
| ||
|
Our production environment just upgraded to 6.2.5 from 6.0.3. The new data inputs seem to be pretty straight forward,...
by
_gkollias
Builder
in
Getting Data In
10-27-2015
|
0
|
3
| ||
|
|
I've installed a universal forwarder on a Windows Domain Controller and configured on the Splunk server end I enabled...
by
asmizaidi
Engager
in
Getting Data In
07-29-2015
|
2
|
3
| ||
|
|
i am working in a environment which has three (almost similar) source types. i want to know which type of data is goi...
by
japala
Path Finder
in
Getting Data In
10-23-2015
|
0
|
5
| ||
|
|
Recently we upgraded the Splunk version to 6.3.0
We are trying to filter certain event codes from Security and Sys...
by
pranov97
New Member
in
Getting Data In
10-12-2015
|
0
|
3
| ||
|
|
I'm trying to monitor file changes within a specific location on a production server's d:\ drive (d:\filestomonitor),...
by
mattvickers
Engager
in
Getting Data In
11-26-2014
|
0
|
1
| ||
|
|
I setup a field extraction two ways, neither have worked and have caused Splunk to not function in a manner I think i...
by
icyfeverr
Path Finder
in
Getting Data In
10-27-2015
|
0
|
2
|
