Thread Info | |||||
---|---|---|---|---|---|
In our environment, We have Universal forwarder, Indexers and search head. We have different approximate 20-22 splunk...
by
rrmavani
Engager
in
Getting Data In
01-25-2014
|
0
|
10
| |||
Is there a way to use a rex command with mode=sed against a specific field in a config file (props.conf)?? I understa...
by
rdownie
Communicator
in
Getting Data In
01-24-2014
|
0
|
1
| |||
I have a .csv file with several fields. there are many date fields and text fields, but fields are long blobs of text...
by
ocallender
Explorer
in
Getting Data In
11-26-2013
|
0
|
2
| |||
I'd like to start forwarding data from a server which is now "unsupported". Normally, I would install a forwarder by ...
by
_gkollias
Builder
in
Getting Data In
01-24-2014
|
0
|
5
| |||
My searchstring looks like this: index=123 sourctype=xyz EventCode=4624 | timechart span=1h count
This gives me Lo...
by
hagjos43
Contributor
in
Getting Data In
01-24-2014
|
0
|
2
| |||
We have a script that splunk executes every minute on the minute...only problem is we do not have this scheduled as a...
by
mookiie2005
Communicator
in
Getting Data In
01-23-2014
|
0
|
13
| |||
Hello.
I'm creating an Event Type like this;
curl -k -u RESTUser:RESTPass https://localhost:8089/servicesNS/RES...
by
dolxor
Path Finder
in
Getting Data In
11-27-2013
|
1
|
2
| |||
Hey Gurus!
I am processing F/W log such as below which I recieve through syslog server.
2010-06-29T20:48:26.742...
by
clyde772
Communicator
in
Getting Data In
06-29-2010
|
2
|
11
| |||
An inputs.conf entry:
[monitor:///opt/atlassian/.../*.log]
sourcetype=atlassian
crcSalt = SOURCE (pretend t...
by
di2esysadmin
Path Finder
in
Getting Data In
01-23-2014
|
0
|
1
| |||
I work with UniversalForwarders (136 servers) sending data to a Heavy Forwarder Cluster (3 servers) that forward data...
by
fabiocaldas
Contributor
in
Getting Data In
12-30-2013
|
0
|
4
| |||
Hi all,
I have a log file with many rows. However, I tried to change the settings in /etc/system/local/props.conf ...
by
leon24
Explorer
in
Getting Data In
01-22-2014
|
0
|
1
| |||
Hello,
I trying to retrieve all login/off/fail on my inderxer from UniversalForwarder filtered by Heavy forwarder ...
by
Gilgalidd
Path Finder
in
Getting Data In
01-17-2014
|
0
|
4
| |||
I have not been able to find a solution although there are questions with the same/similar symptom. My log files are ...
by
tacleal
Engager
in
Getting Data In
09-28-2011
|
1
|
3
| |||
I have log files that I would like to get into Splunk but I'm having trouble due to the way the date and time are for...
by
khhenderson
Path Finder
in
Getting Data In
01-22-2014
|
1
|
5
| |||
timeformat is not desired, I tried SEDCMD to correct it(12-hour format with 'am','pm')
props.conf of INDEXER: SEDC...
by
crazyeva
Contributor
in
Getting Data In
01-22-2014
|
2
|
4
| |||
Hi,I met some log and it's date written by Chinese, like '1 五月 2013,11:10' means '1 May 2013,11:10'. Is it possible t...
by
jichen
Explorer
in
Getting Data In
05-12-2013
|
0
|
3
| |||
I have hunted high and low for documentation of appropriate sourcetypes.conf and props.conf stanzas for the Nagios ev...
by
grijhwani
Motivator
in
Getting Data In
07-29-2013
|
0
|
3
| |||
Hi
I'm new to Splunk and have what I think is a strange use case (maybe not!). We are capturing logs from an embed...
by
WiredBob
Engager
in
Getting Data In
03-13-2012
|
1
|
3
| |||
Howdy!
I have been wracking my head around this for the past few days and cannot seem to figure it out. For testin...
by
adjmt
Explorer
in
Getting Data In
01-17-2014
|
3
|
6
| |||
Hi Guys ...
I get a question about input queue on forwarder ?
I found a document "Use persistent queues to he...
by
SamChang
Path Finder
in
Getting Data In
01-21-2014
|
0
|
1
| |||
Hi , I want to convert the Input :2013-12-09 18:11:34 Input :13-12-09 18:11:34 I want a common regex to convert the ...
by
Jananee_iNautix
Path Finder
in
Getting Data In
01-20-2014
|
0
|
3
| |||
Hi guys,
I'm trying to deal with a specific requirement and I've tried modifying the props.conf to my liking, but ...
by
Lazarix
Communicator
in
Getting Data In
01-20-2014
|
0
|
2
| |||
Hello.
I would like sort the data from Windows Security log, but some reason still passed to all the data in Splu...
by
templier
Communicator
in
Getting Data In
01-20-2014
|
0
|
2
| |||
initially I had thought that the SplunkLightForwarder had less impact on performance when installed on a platform, ho...
by
Dark_Ichigo
Builder
in
Getting Data In
01-19-2014
|
1
|
1
| |||
Hello All,
This is what i want to achieve. I have dhcp logs getting indexed to splunk. Our virus scanners periodic...
by
saurabhkunte
Path Finder
in
Getting Data In
01-14-2014
|
0
|
2
|