Thread Info | |||||
---|---|---|---|---|---|
We have a log file rotation policy that rolls over based on size (64MB). For some reason, every now and then (frequen...
by
sfmandmdev
Path Finder
in
Getting Data In
09-24-2012
|
2
|
4
| |||
Here is the search string:
MissingUserData exchange rate | rex "ID :(?
.+)" | fields ORDERID
This r...
by
sansay
Contributor
in
Getting Data In
09-24-2012
|
0
|
4
| |||
I have a syslog box forwarding to splunk for indexing. I have the input type setup as syslog. Unfortunately, it doesn...
by
infrauser
Explorer
in
Getting Data In
12-20-2010
|
0
|
3
| |||
Hello,
I have several scripted input written in python. At the beginning, it run well but after about 10 minutes, ...
by
sieutruc
Contributor
in
Getting Data In
09-25-2012
|
0
|
3
| |||
Hi
I am receiving a syslog feed from a server.I am trying to index that data. In syslog feed no milliseconds are ...
by
adityapavan18
Contributor
in
Getting Data In
08-31-2012
|
1
|
11
| |||
Looking for a good guide to deploying the *Nix app to all of my Universal Forwarders. Have around 50 forwarders set u...
by
tadreeves
Engager
in
Getting Data In
05-16-2011
|
0
|
3
| |||
I have a universal forwarder pushing a log file from a window server into a splunk indexer in this manner.
Configu...
by
asarolkar
Builder
in
Getting Data In
09-25-2012
|
1
|
2
| |||
Hi
I use Splunk 4.1.4 and have difficulties to get the right timestamp from my event
I have modified the props....
by
RobertRi
Communicator
in
Getting Data In
09-21-2012
|
0
|
6
| |||
Ok we are currently receiving two sets of data a preliminary version (received first) and a finalised version (receiv...
by
phoenixdigital
Builder
in
Getting Data In
09-24-2012
|
0
|
2
| |||
Hi,
We recently had a temporary problem with a license configuration which produced warnings when searching in the...
by
JeanA
New Member
in
Getting Data In
09-24-2012
|
0
|
1
| |||
A few months ago I was setting up a Windows Forwarder machine to monitor some directories on other Windows machines v...
by
brew169
New Member
in
Getting Data In
09-22-2012
|
0
|
3
| |||
I have the following search: "avg tx =" | timechart max(tx) by source
Where Source is the filenames, for example: ...
by
yuanqi
New Member
in
Getting Data In
09-21-2012
|
0
|
13
| |||
Quick question -
I realise that putting a forwarder into lightweight mode will automatically limit throughput by ...
by
pj
Contributor
in
Getting Data In
10-08-2010
|
1
|
3
| |||
I have some log files from an internal application that look like this:
hostname|Linux|RHEL6|20Sep2012:1348163022|...
by
Ricapar
Communicator
in
Getting Data In
09-20-2012
|
1
|
6
| |||
I have 2 Splunk Indexer and have 10 Splunk Forwarder forward to both Splunk Indexer. Once Indexer01 down for 1 day an...
by
thomson12
New Member
in
Getting Data In
09-20-2012
|
0
|
1
| |||
Hi Splunk Support,
I have encounter the issue on Splunk Forwarder have lost connection to Splunk Indexer after cle...
by
thomson12
New Member
in
Getting Data In
09-20-2012
|
0
|
3
| |||
We are working in an auto-scaled PAAS environment where servers can be terminated with very little notice. I'd like t...
by
ianmaddox4bookr
Explorer
in
Getting Data In
09-17-2012
|
1
|
2
| |||
After splunkd logs an error stating that it is "Ignoring path due to ...", how can we tell Splunk to resume indexing ...
by
joelshprentz
Path Finder
in
Getting Data In
06-01-2011
|
3
|
6
| |||
We have setup splunk in our environment, and we have logs coming in from different geographies (US/UK/Asia). The logs...
by
smmehadi
Explorer
in
Getting Data In
09-17-2012
|
0
|
4
| |||
I'm using an existing Splunk instance that already has hundreds of sources and source types. How can I search among t...
by
mdickey
Engager
in
Getting Data In
09-19-2012
|
0
|
5
| |||
We just upgraded our environment to 4.3.2 from 4.2.3 and see this message spamming our splunkd.logs on both hot/warm ...
by
sonicZ
Contributor
in
Getting Data In
05-07-2012
|
0
|
5
| |||
Ok, so now my app has a scripted input (Powershell) and setup.xml is communicating with an eai endpoint defined insid...
by
Leo
Splunk Employee
in
Getting Data In
04-30-2010
|
5
|
6
| |||
Can Splunk index SQL Server Trace (*.trc) logs?
by
maverick
Splunk Employee
in
Getting Data In
02-24-2010
|
4
|
3
| |||
Hi there,
What I would really like, is creating a view, where I can select a (log)file, and shows the most recent ...
by
renems
Communicator
in
Getting Data In
09-18-2012
|
1
|
2
| |||
I downloaded and installed Splunk version 4.3.4, build 136012 successfully on my Windows XP system for evaluation. I ...
by
vcorace
New Member
in
Getting Data In
09-19-2012
|
0
|
1
|