| Thread Info | |||||
|---|---|---|---|---|---|
| 
      
        I am receiving the following error messages in splunkd.log every 10 minutes: 
  04-16-2013 20:31:37.148 +0000 ERROR H...
        
       
         
           by 
           
                
                    
                        tvsjr_parsons
                    
                
           
             
             
               Engager
             
           
           in
           Getting Data In
           
           
              
               04-16-2013
             
           
         
        
      | 
   
		
		3
   
 | 	 
	  
	  3
	 
 | |||
| 
      
        What is the precedence? or will it creat problems if I am monitoring All files in directory and also monitor a specif...
        
       
         
           by 
           
                
                    
                        Wilf
                    
                
           
             
             
               Explorer
             
           
           in
           Getting Data In
           
           
              
               05-01-2013
             
           
         
        
      | 
   
		
		0
   
 | 	 
	  
	  1
	 
 | |||
| 
      
        Hi to all - short question: 
  Do changes to the props.conf really require a restart of splunk? Is there a way to app...
        
       
         
           by 
           
                
                    
                        FRoth
                    
                
           
             
             
               Contributor
             
           
           in
           Getting Data In
           
           
              
               05-18-2011
             
           
         
        
      | 
   
		
		5
   
 | 	 
	  
	  3
	 
 | |||
| 
      
        Hi, I would like to filter out some event logs coming from different forwarders. I have been able to filter out some ...
        
       
         
           by 
           
                
                    
                        joffrey_braban
                    
                
           
             
             
               Engager
             
           
           in
           Getting Data In
           
           
              
               04-29-2013
             
           
         
        
      | 
   
		
		0
   
 | 	 
	  
	  17
	 
 | |||
| 
      
        My event have separate date and time fields on separate lines. E.g. 
  
   
     Date: 29 April 2013
     
    
     ...
        
       
         
           by 
           
                
                    
                        MatMeredith
                    
                
           
             
             
               Path Finder
             
           
           in
           Getting Data In
           
           
              
               04-30-2013
             
           
         
        
      | 
   
		
		0
   
 | 	 
	  
	  4
	 
 | |||
| 
      
        I'm seeing a build up of files left behind in $SPLUNK_HOME/var/spool/splunk. This location is part of the system/defa...
        
       
         
           by 
           
                
                    
                        sowings
                    
                
           
             
             
               Splunk Employee
             
           
           in
           Getting Data In
           
           
              
               10-31-2012
             
           
         
        
      | 
   
		
		2
   
 | 	 
	  
	  2
	 
 | |||
| 
      
        Using the Windows forward client, is there a way to force the client to only use an IPv6 tunnel? 
  Situation: using ...
        
       
         
           by 
           
                
                    
                        jtrucks
                    
                
           
             
             
               Splunk Employee
             
           
           in
           Getting Data In
           
           
              
               04-29-2013
             
           
         
        
      | 
   
		
		1
   
 | 	 
	  
	  2
	 
 | |||
| 
      
        Is there any way to add headers to the csv output I retrieve from curl? I'm getting them in the gui, but I can't figu...
        
       
         
           by 
           
                
                    
                        sanorthrup
                    
                
           
             
             
               Path Finder
             
           
           in
           Getting Data In
           
           
              
               04-30-2013
             
           
         
        
      | 
   
		
		1
   
 | 	 
	  
	  4
	 
 | |||
| 
      
        Hello,  I am using splunk 4.2.5 When I export data to csv file from splunk via rest api I encountered a problem. Splu...
        
       
         
           by 
           
                
                    
                        voffko
                    
                
           
             
             
               Engager
             
           
           in
           Getting Data In
           
           
              
               06-13-2012
             
           
         
        
      | 
   
		
		1
   
 | 	 
	  
	  1
	 
 | |||
| 
      
        I am currently configuring systems to forward data to splunk, but I have hit a wall with the Universal forwarder conf...
        
       
         
           by 
           
                
                    
                        vial8
                    
                
           
             
             
               Engager
             
           
           in
           Getting Data In
           
           
              
               04-30-2013
             
           
         
        
      | 
   
		
		0
   
 | 	 
	  
	  1
	 
 | |||
| 
      
        Hi, What is the best method of getting data fro NetScaler into Splunk? Is Splunk able to communicate directly to a Ne...
        
       
         
           by 
           
                
                    
                        mrpickford
                    
                
           
             
             
               Engager
             
           
           in
           Getting Data In
           
           
              
               03-04-2011
             
           
         
        
      | 
   
		
		1
   
 | 	 
	  
	  2
	 
 | |||
| 
      
        I have a series of files I'm monitoring on windows servers that have to have wildcards in the monitor path. 
  C:\Pro...
        
       
         
           by 
           
                
                    
                        emiller42
                    
                
           
             
             
               Motivator
             
           
           in
           Getting Data In
           
           
              
               04-29-2013
             
           
         
        
      | 
   
		
		2
   
 | 	 
	  
	  2
	 
 | |||
| 
      
        Ahhh, the joys of running clustered indexers. 
  I need to find a way to move the _internaldb out from /opt/splunk/va...
        
       
         
           by 
           
                
                    
                        davidpaper
                    
                
           
             
             
               Contributor
             
           
           in
           Getting Data In
           
           
              
               04-28-2013
             
           
         
        
      | 
   
		
		3
   
 | 	 
	  
	  2
	 
 | |||
| 
      
        Good Day, 
  I have installed the latest Splunk on my test machine (WINDOWS), and I want to install another instance ...
        
       
         
           by 
           
                
                    
                        crt89
                    
                
           
             
             
               Communicator
             
           
           in
           Getting Data In
           
           
              
               04-26-2013
             
           
         
        
      | 
   
		
		0
   
 | 	 
	  
	  2
	 
 | |||
| 
      
        What made this warning appear ? 1 orphaned indexer reported by 1 indexer  
  How to Correct by midnight to avoid viol...
        
       
         
           by 
           
                
                    
                        sathiyamoorthy
                    
                
           
             
             
               Explorer
             
           
           in
           Getting Data In
           
           
              
               04-04-2013
             
           
         
        
      | 
   
		
		0
   
 | 	 
	  
	  1
	 
 | |||
| 
      
        Hello I am trying create an completly unattended installation and the DEPLOYMENT_SERVER flag doesn't seem to generate...
        
       
         
           by 
           
                
                    
                        bmacias84
                    
                
           
             
             
               Champion
             
           
           in
           Getting Data In
           
           
              
               11-26-2012
             
           
         
        
      | 
   
		
		1
   
 | 	 
	  
	  3
	 
 | |||
| 
      
        My Splunk forwarder is forwarding ~5 events per second (per my Deployment Monitor on my search head). The maxKBps is ...
        
       
         
           by 
           
                
                    
                        ebay_nkitmitto
                    
                
           
             
             
               Engager
             
           
           in
           Getting Data In
           
           
              
               04-26-2013
             
           
         
        
      | 
   
		
		5
   
 | 	 
	  
	  1
	 
 | |||
| 
      
        Can Splunk monitor a Checkpoint Firewall and if so can the logs be downloaded to a Linux Server
        
       
         
           by 
           
                
                    
                        stanrygula
                    
                
           
             
             
               New Member
             
           
           in
           Getting Data In
           
           
              
               11-03-2011
             
           
         
        
      | 
   
		
		0
   
 | 	 
	  
	  2
	 
 | |||
| 
      
        Hello, I've only just started learning Splunk. How do I add a file, and how to specify that the first row was heading...
        
       
         
           by 
           
                
                    
                        annaav
                    
                
           
             
             
               New Member
             
           
           in
           Getting Data In
           
           
              
               04-25-2013
             
           
         
        
      | 
   
		
		0
   
 | 	 
	  
	  2
	 
 | |||
| 
      
        Hi, if I import data from a single file, can I get any information of the stanzas (of the several props.conf) splunk ...
        
       
         
           by 
           
                
                    
                        marcokrueger
                    
                
           
             
             
               Path Finder
             
           
           in
           Getting Data In
           
           
              
               04-26-2013
             
           
         
        
      | 
   
		
		1
   
 | 	 
	  
	  1
	 
 | |||
| 
      
        I have recently starting working on an integration with Splunk via the API, and am unclear on how to run a saved sear...
        
       
         
           by 
           
                
                    
                        brettcave
                    
                
           
             
             
               Builder
             
           
           in
           Getting Data In
           
           
              
               04-25-2013
             
           
         
        
      | 
   
		
		1
   
 | 	 
	  
	  1
	 
 | |||
| 
      
        Hello, 
  I got a problem in defining source type to get logs from a windows host on my lan. 
  I receive the logs ov...
        
       
         
           by 
           
                
                    
                        pme
                    
                
           
             
             
               New Member
             
           
           in
           Getting Data In
           
           
              
               04-25-2013
             
           
         
        
      | 
   
		
		0
   
 | 	 
	  
	  3
	 
 | |||
| 
      
        How to add delete update tags using | rest command? 
  I do see examples using curl in doc, but i would like to know ...
        
       
         
           by 
           
                
                    
                        ma_anand1984
                    
                
           
             
             
               Contributor
             
           
           in
           Getting Data In
           
           
              
               03-01-2013
             
           
         
        
      | 
   
		
		0
   
 | 	 
	  
	  2
	 
 | |||
| 
      
        I have several virtual hosts under /opt/log/ 
  /opt/log/webA /opt/log/webB /opt/log/webC 
  They all have denied.log...
        
       
         
           by 
           
                
                    
                        splunkingsplun1
                    
                
           
             
             
               Explorer
             
           
           in
           Getting Data In
           
           
              
               04-25-2013
             
           
         
        
      | 
   
		
		0
   
 | 	 
	  
	  1
	 
 | |||
| 
      
        Creating a script that will install UF on remote server, where on my deployment server should I go to save that scrip...
        
       
         
           by 
           
                
                    
                        mariaerh
                    
                
           
             
             
               New Member
             
           
           in
           Getting Data In
           
           
              
               04-24-2013
             
           
         
        
      | 
   
		
		0
   
 | 	 
	  
	  4
	 
 |