Thread Info | |||||
---|---|---|---|---|---|
Newbie to splunk, hello everyone...
I use the UniversalForwarder on a pool of windows IIS servers. Each server has...
by
umiotoko
New Member
in
Getting Data In
10-01-2012
|
0
|
1
| |||
How to I find my ACCESS_TOKEN to use the REST API?
by
tashburn
New Member
in
Getting Data In
10-01-2012
|
0
|
1
| |||
Is it possible to forward the data from one Universal Forwarder to another Universal Forwarder ? If so can you please...
by
ssankeneni
Communicator
in
Getting Data In
09-27-2012
|
0
|
2
| |||
Hello
I got a strange error as:
Checking conf files for typos...
Possible typo in stanza [indexAndForward] in /...
by
sieutruc
Contributor
in
Getting Data In
09-27-2012
|
1
|
6
| |||
I am confused about using Splunk installed on a Linux OS and viewing Windows Event logs. I plan to send all of my log...
by
johns3
Path Finder
in
Getting Data In
09-30-2012
|
1
|
1
| |||
Currently we ping the HTTP, SplunkTCP, and MgmtHostPorts to provide us with status of the splunk indexers. At busy ti...
by
sfmandmdev
Path Finder
in
Getting Data In
11-04-2010
|
2
|
1
| |||
My lightforwarders are working and sending event information to my index/search server but the customer sourcetypes I...
by
cvImplex
Explorer
in
Getting Data In
03-01-2011
|
0
|
5
| |||
I am using splunk 4.3.1 and have a custom sourcetype
props.conf
[vlf]
REPORT-a=voxeo-vlf
TRANSFORMS-a = voxeo-v...
by
robgreen
Path Finder
in
Getting Data In
04-13-2012
|
1
|
3
| |||
Is there a way to remotely manage data inputs, via configuration files pushed out by a deployment server?
I have p...
by
lelanb
Engager
in
Getting Data In
07-14-2010
|
1
|
2
| |||
So say I have an index that's got data in it back 120 Days, and I want to delete events older than 90 days, keeping t...
by
beaunewcomb
Communicator
in
Getting Data In
09-26-2012
|
0
|
5
| |||
Here is our props.conf:
[aristajson] TIME_PREFIX = hosttime": " MAX_TIMESTAMP_LOOKAHEAD = 22 BREAK_ONLY_BEFORE = {<!-- -->...
by
gryz
Explorer
in
Getting Data In
09-25-2012
|
0
|
2
| |||
We have some syslog feeds coming directly into an indexer. While this will eventually get addressed with forwarders I...
by
Runals
Motivator
in
Getting Data In
09-27-2012
|
0
|
2
| |||
Hi
I am testing the log length with sending about two pages of data only 1 character. Lets say "b" so the data wil...
by
vitki
Explorer
in
Getting Data In
09-12-2012
|
0
|
12
| |||
Hi ! I know how to anonymize data before adding them to an index (using sed & props.conf). But how to apply this sed ...
by
orenault
Engager
in
Getting Data In
09-28-2012
|
1
|
3
| |||
I have a sourcetype that the events are in json format. Each json event could be more the 2000 lines. I have the foll...
by
lpolo
Motivator
in
Getting Data In
09-27-2012
|
0
|
11
| |||
Hi
Need advice on the following inquires: Scenario:
Currently I got a Windows Sever 2003 running and is listeni...
by
ongwy0303
New Member
in
Getting Data In
09-28-2012
|
0
|
1
| |||
Have been trying to configure a lookup table with an external python script to no avail. Was trying to model it after...
by
jcbrendsel
Path Finder
in
Getting Data In
06-18-2012
|
0
|
1
| |||
Hi,
I am trying to search:
sourcetype=access* bytes>1024*10
But this returns event bytes less than 1024, an...
by
melonman
Motivator
in
Getting Data In
09-27-2012
|
0
|
2
| |||
I'm trying to use a lookup table to get the # of days in the current month (I was told at .conf2012 that is the only ...
by
atornes
Path Finder
in
Getting Data In
09-27-2012
|
0
|
5
| |||
Greetz,
Please can someone tell me if these events every minute are raw universal forwarder heartbeat data?
» ...
by
ephemeric
Contributor
in
Getting Data In
05-28-2012
|
0
|
5
| |||
I configure a port 9997 on a splunk server to receive a forwarder 's event. The forwarder will transfer all event con...
by
shizl
Engager
in
Getting Data In
09-26-2012
|
0
|
1
| |||
Inputs entry is:
[script://./bin/db_lockout_query.rb]
disabled = 0
sourcetype = dbjobs
source = db_lockout_query.r...
by
twinspop
Influencer
in
Getting Data In
09-20-2012
|
1
|
2
| |||
How often does a forwarder check its logs and forward data? Can I set some sort of configuration where forwarders onl...
by
aywong
Path Finder
in
Getting Data In
09-26-2012
|
0
|
8
| |||
Hello,
I am running a Splunk at a solaris server.
I have deployed 4 universal forwarders, 3 at solaris machine...
by
mkashif
Explorer
in
Getting Data In
05-29-2011
|
1
|
6
| |||
Hello,
I don't know what configuration my clientname win23_ ios_____dc_mm should gets in the configuration file be...
by
sieutruc
Contributor
in
Getting Data In
09-26-2012
|
0
|
2
|