Thread Info | |||||
---|---|---|---|---|---|
I have a strange problem. When I install the universal forwarder on my log server and perform a netstat -l I do not s...
by
sab057
Explorer
in
Getting Data In
07-15-2011
|
2
|
4
| |||
I have been reading link:Splunk 4.2 Universal Forwarder *nix
Why does a universal forwarder need the entire *nix a...
by
byronschwab
Engager
in
Getting Data In
07-15-2011
|
0
|
1
| |||
I am trying to write a custom search module in python that will check the host field of event data in a comprehensive...
by
msantoro1
Explorer
in
Getting Data In
07-13-2011
|
0
|
4
| |||
Not new to Splunk, but new to 4.2.2. I had setup a forwarder and manually entered specific paths to monitor:
/p01/...
by
_z_
Explorer
in
Getting Data In
07-13-2011
|
1
|
7
| |||
Hello all,
We have Nessus running on a Linux server which also has a Splunk Heavy Forwarder 4.1.8. We have the Nes...
by
I-Man
Communicator
in
Getting Data In
07-13-2011
|
1
|
2
| |||
Most of our systems use rsyslog for logging, and log their events over UDP to a central splunk server. This works fin...
by
tcutts
New Member
in
Getting Data In
03-28-2011
|
0
|
2
| |||
hello I need help. for masking text in .log file with splunk forwarder i have 16 numbers like 1111-2222-3333-4444 I ...
by
gchkhikvadzecar
Engager
in
Getting Data In
07-13-2011
|
1
|
1
| |||
Hi, I saw several posts about this problem, but none with a valid answer. My problem is that I have a running Splunk ...
by
imbuto
New Member
in
Getting Data In
07-13-2011
|
0
|
1
| |||
I have a 'dev/tst' db host.. but have dev app indexer and tst app indexer. Is there a way to configure a single forwa...
by
_z_
Explorer
in
Getting Data In
07-12-2011
|
1
|
2
| |||
I have several groupwise servers running forwarders to a single index server. For the most part the data is arriving ...
by
Cagey
Engager
in
Getting Data In
07-12-2011
|
1
|
1
| |||
Hi all,
I've studied that Splunk is capable of retenting the original logs feed in to it, also audit the changes i...
by
infosec_skrc
Explorer
in
Getting Data In
07-05-2011
|
0
|
2
| |||
Hi,
I have a forwarder which collects WMI (cpu, disk, processes, memory) from ~150 servers (win2008R2, win2003). I...
by
Vladimir
Path Finder
in
Getting Data In
07-11-2011
|
0
|
1
| |||
Hi. I have done a good amount of reading on this, and it seems to be a popular subject both in the documentation and ...
by
Sqig
Path Finder
in
Getting Data In
07-11-2011
|
0
|
4
| |||
For testing purposes, I would really really like to force splunk to poll files in a monitor:// directory structure (a...
by
sconover
Engager
in
Getting Data In
07-11-2011
|
1
|
3
| |||
Hi I want to investigate about not responding application. 20 PC has this application installed but only 3 or 4 of th...
by
dbarbon
Engager
in
Getting Data In
07-11-2011
|
1
|
2
| |||
Hello,
I connect a bat script as input data to my Splunk instance. This script reads a folder of websphere log fil...
by
Nieucel
Engager
in
Getting Data In
07-07-2011
|
0
|
2
| |||
I've got some Active Directory logs which are CSV that I'm trying to split apart into appropriate fields. The header ...
by
howyagoin
Contributor
in
Getting Data In
07-09-2011
|
0
|
2
| |||
I'm trying to get Splunk to index the output from the Connect:Enterprise cmulist command. I run the command periodica...
by
MickSheppard
Path Finder
in
Getting Data In
07-07-2011
|
0
|
2
| |||
Hi guys,
Trying to make a custom blacklist for one of my input monitor points that excludes certain directories a...
by
balbano
Contributor
in
Getting Data In
07-06-2011
|
0
|
1
| |||
Is there a timezone classification for = TZ/Arizona?
by
gekoner
Communicator
in
Getting Data In
07-06-2011
|
0
|
2
| |||
Two questions:
Does Splunk forwarder maintain some kind of log files (or for that matter anything) which might kee...
by
smahtha
Engager
in
Getting Data In
07-06-2011
|
0
|
1
| |||
Hi,
I wish to tag basic information in source data before I send it to Indexer. I wish to tag the host, sourcetype...
by
rahiparikh
Explorer
in
Getting Data In
07-06-2011
|
0
|
1
| |||
Hi,
We're currently experimenting with having Splunk directly index our Syslog-NG logs.
However, we seem to hav...
by
hmsjclee
Engager
in
Getting Data In
07-13-2010
|
5
|
6
| |||
I have splunk running on windows. I want to monitor the /etc directory on a linux server with fschange. Is that possi...
by
tasdienes
Engager
in
Getting Data In
07-05-2011
|
0
|
2
| |||
We have a fairly large Splunk environment with several 1000 hosts reporting in. Within our business we have requireme...
by
pj
Contributor
in
Getting Data In
05-13-2011
|
2
|
8
|