Thread Info | |||||
---|---|---|---|---|---|
I have a 1 GB license and I would like to delete an index that causes a inflow of huge syslogs, how do I remove it in...
by
oranger1426
Explorer
in
Getting Data In
04-11-2013
|
0
|
2
| |||
The 5.0 release documentation states that fschange is deprecated.
We use this extensively for configuration change...
by
joonradley
Path Finder
in
Getting Data In
11-29-2012
|
1
|
7
| |||
I am trying to identify "windows hosts" that are logging to my Splunk indexer. Unfortunately, neither the hosts/serve...
by
steveirogers
Communicator
in
Getting Data In
03-19-2012
|
0
|
8
| |||
I am having a heck of a time understanding NET-SNMP configuration and am hoping that has successful done this for win...
by
mship
Path Finder
in
Getting Data In
03-05-2013
|
1
|
4
| |||
I have an inputs.conf that looks like this:
[monitor:///syslog/.../*.log]
host_segment = 4
sourcetype = syslog
ign...
by
sowings
Splunk Employee
in
Getting Data In
12-17-2012
|
1
|
5
| |||
I asked a question earlier regarding the preformatting of a csv report which several multivalue fields (Preformat Aut...
by
rlautman
Path Finder
in
Getting Data In
03-22-2013
|
1
|
4
| |||
Hello,
I have a test script that writes out hello_d01 to hello_d10 every 5 seconds... for instance:
16:04:14.36 hel...
by
oilmouse
New Member
in
Getting Data In
04-02-2013
|
0
|
12
| |||
No data in estreamer.log after Sourcefire update. SSL test shows connection to Sourcefire server is up. I've restarte...
by
johnwsrns
New Member
in
Getting Data In
12-05-2012
|
0
|
2
| |||
Hi all,
Does anyone try to use FWN1 auth method successfully instead of SSL one?
I'm asking because it could be...
by
cyrillefranchet
Explorer
in
Getting Data In
05-11-2011
|
0
|
2
| |||
Hi,
I'm trying to configure Splunk with Checkpoint. I have an error during the opsec_putkey on the splunk server :...
by
gskorski
Explorer
in
Getting Data In
07-06-2012
|
0
|
4
| |||
Hi,
Query over the OPSEC LEA log collection. Does the OPSEC add-on leave a copy of the logs on the CheckPoint prov...
by
cmacey
Engager
in
Getting Data In
03-01-2013
|
1
|
2
| |||
It's not listed as being supported, but I wondered whether anyone has tried it with this version..
by
richnavis
Contributor
in
Getting Data In
04-09-2013
|
1
|
1
| |||
Is there a way on the universal forwarder to send different data types to different indexers? For example, we want to...
by
aaronkorn
Splunk Employee
in
Getting Data In
04-09-2013
|
0
|
3
| |||
I have installed Splunk forwarder on a Windows 2003 Server S2- 64-bit I have set the INPUTS.CONF,WMI.CONF to capture...
by
chimbudp
Contributor
in
Getting Data In
04-04-2013
|
0
|
1
| |||
Hi there,
I'm hoping this is a simple question...
We have 50+ forwarders, and I'm trying to locate the forwarde...
by
SplunkFu
Path Finder
in
Getting Data In
04-08-2013
|
0
|
2
| |||
I have installed splunk on machine 1 and universal forwarder on machine 2. I can see on forwarder:
C:\Program File...
by
shivanshuk
Explorer
in
Getting Data In
03-28-2013
|
0
|
1
| |||
Syslogs already has all the logs from other server using snare udp 514
Do I need to configure anything on the splu...
by
oranger1426
Explorer
in
Getting Data In
04-08-2013
|
0
|
3
| |||
Hello,
I have been trying to set an index retention policy on my indexer but it does not seem to be removing any o...
by
aaronkorn
Splunk Employee
in
Getting Data In
04-08-2013
|
0
|
1
| |||
How do you stream real-time results via the rest api? I've tried using the typical search submit method, which always...
by
nnachefski
Engager
in
Getting Data In
11-22-2010
|
4
|
4
| |||
Hi.
I just setup a free account in splunkstorm and try to set up rsyslog base on the documentation and I didn't se...
by
pepepito
New Member
in
Getting Data In
04-05-2013
|
0
|
1
| |||
Hi,
I have a csv file with headers that needs processing. I want to 1) filter out the header and 2) have the field...
by
a212830
Champion
in
Getting Data In
04-04-2013
|
0
|
2
| |||
How do I deal with large syslog files that keep growing? Do I just delete them or is there an automated way of rollin...
by
craigrussell
New Member
in
Getting Data In
04-04-2013
|
0
|
4
| |||
I have a log with multiple lines that contains several timestamps. When monitoring the logs splunk is split them into...
by
royimad
Builder
in
Getting Data In
04-05-2013
|
0
|
1
| |||
Hello everyone,
i read this following link
this
Now i have one question in my mind,what happen when more tha...
by
snehal8
Path Finder
in
Getting Data In
04-05-2013
|
1
|
2
| |||
Hi,
I have configured my props.conf and mentioned the "sourcetype" but later I dont see that sourcetype listed in ...
by
abhayneilam
Contributor
in
Getting Data In
04-03-2013
|
0
|
6
|