Thread Info | |||||
---|---|---|---|---|---|
I cannot find much helpful documentation on handling XML log files. This link seems to be on the right track but what...
by
cparham
Explorer
in
Getting Data In
05-04-2010
|
3
|
6
| |||
Hello
I have troubles asigning sourcetypes for multiple filetypes in one directory. I have read a few posts which ...
by
RobertRi
Communicator
in
Getting Data In
07-30-2010
|
0
|
6
| |||
Hi,
Currently via the web UI I believe we can only set the interval time for scripted inputs to run.
Is it pos...
by
remy06
Contributor
in
Getting Data In
08-04-2010
|
1
|
2
| |||
I've got a Win 2008 Web server, and the layout on the disk is as follow:
C:\inetpub\sites\www.fqdn.com\logs\
C:\in...
by
Joffer
Path Finder
in
Getting Data In
07-26-2010
|
1
|
8
| |||
Is it possible to forward data from source A to Indexer A and data from source B to Indexer B if I use the light forw...
by
chris
Motivator
in
Getting Data In
07-29-2010
|
2
|
3
| |||
Hi,
I have been using splunk and unfortunately put all data into main index, but because there is a need to allow...
by
melonman
Motivator
in
Getting Data In
06-07-2010
|
0
|
6
| |||
I'm using a scripted input for an application. The script writes warnings to stderr, which makes them show up in splu...
by
erydberg
Splunk Employee
in
Getting Data In
08-03-2010
|
1
|
1
| |||
How to send syslog-ng messages to Splunk properly? I'm using Free 'splunk-4.1.4-82143-linux-2.6-intel.deb' and 'syslo...
by
Katey
Explorer
in
Getting Data In
08-02-2010
|
3
|
4
| |||
Is it possible to use the oneshot command from a remote server.
Essentially we have a series of logs that are not ...
by
bnolen
Path Finder
in
Getting Data In
08-03-2010
|
0
|
4
| |||
I have a log, representing data from multiple hosts, with lines like this:
7/30/2010 4:11:52 PM host=OAK06VMH load...
by
Justin_Grant
Contributor
in
Getting Data In
07-31-2010
|
1
|
1
| |||
In other words, can I set 30 days OR 700G (for instance)? The docs aren't clear on how to do that.
by
bfaber
Communicator
in
Getting Data In
07-31-2010
|
0
|
1
| |||
Hello all, I'm new to Splunk, so please bear with me as I ask a really n00bish question.
Is it necessary to define...
by
afroblanco
Engager
in
Getting Data In
07-30-2010
|
1
|
3
| |||
On Windows, I want to set the homePath in my indexes.conf file for a new index I created, which is located on my E:\ ...
by
maverick
Splunk Employee
in
Getting Data In
07-30-2010
|
0
|
1
| |||
I have a WMI Perf counter query that always returns zero in Splunk as the values are always < 1 second. It looks like...
by
COH
New Member
in
Getting Data In
07-09-2010
|
0
|
1
| |||
I am trying to analyse a squid access log for top 10 reports (top sources, top destinations, etc.)
I imported the ...
by
njathan
Explorer
in
Getting Data In
07-28-2010
|
1
|
5
| |||
In this answer I can see there is ways to get the status of the tailing processor on a box. Only problem is it looks ...
by
zscgeek
Path Finder
in
Getting Data In
07-27-2010
|
0
|
2
| |||
I turned off the syslog server running alongside Splunk and configured Splunk to listen on 514. It indexed the forwar...
by
noahjscales
Explorer
in
Getting Data In
07-20-2010
|
1
|
3
| |||
Hi There.. What is the best way to accomplish the following: I have several users who are on XP notebooks who need to...
by
Sparky
Engager
in
Getting Data In
07-29-2010
|
1
|
1
| |||
I have version 4.1 and have it set up to recieve syslog data directly from various servers but I only want to hold th...
by
miguel255
Engager
in
Getting Data In
07-29-2010
|
1
|
1
| |||
Hi there.Lets see if someone can help me with this. We have this requirement:
We have several saved searches and r...
by
hbazan
Path Finder
in
Getting Data In
07-16-2010
|
2
|
5
| |||
FORMAT = <string>
* The special identifier $0 represents what was in the DEST_KEY before this regex was performed.
...
by
wollinet
Path Finder
in
Getting Data In
07-15-2010
|
0
|
6
| |||
This would be a very trivial question, but what are the circumstances when splunk re-indexes new data? Replacing an e...
by
heterodyned
Path Finder
in
Getting Data In
07-23-2010
|
0
|
5
| |||
Hello ,
We have splunk 3.4.6 installed on one of our servers locally, on that server it was configured so that it ...
by
kranthi
New Member
in
Getting Data In
07-28-2010
|
0
|
1
| |||
According to the wiki the best practice for syslog is having another program write the files to disk then have Splunk...
by
Jason
Motivator
in
Getting Data In
07-28-2010
|
1
|
1
| |||
Hi, I have used props.conf and transforms.conf to configure two different sourcetypes coming to Splunk from udp:514. ...
by
alextsui
Path Finder
in
Getting Data In
07-26-2010
|
0
|
3
|