IT Operations Discussions

All the up-time. All the nines.

Community Activity

Alert when license consumption reaches 1TB Hi, What will be my search params if i want an alert when my license consumption reaches 1TB. Thanks! Oliver by oliverrojo Engager in IT Operations Discussions 05-14-2021 0 9	0	9
search license usage with threshold Hi,I am trying to search for hosts with license usage above 5GB but my search parameter is still showing hosts with u... by oliverrojo Engager in IT Operations Discussions 05-13-2021 0 2	0	2
query to know who has logged in the server Hi Alli am new to splunk, I have a server with hostname server01 and i want to know who has logged in to the server i... by risingflight143 Explorer in IT Operations Discussions 04-28-2021 0 1	0	1
Entity restriction based on teams configuration Hi Team, We have a requirement where we dont want to show the list of servers to any user group and it should be avai... by martinnepolean Explorer in IT Operations Discussions 04-23-2021 0 0	0	0
Finding avarage event count by time Hey all,Are you familiar with a way to find average event count by time?I have an events that represents user logins.... by Tankwell Explorer in IT Operations Discussions 03-16-2021 0 2	0	2
Analytics ‘You do not have permissions to access objects of user=’ and inability to toggle certain flags Two symptoms have been happening for some time and none of us know why or how this happened. The 2 symptoms are the ... by splunkceh Engager in IT Operations Discussions 03-11-2021 0 8	0	8
Splunk add-on for TA_windows generate a lot of perfmon data Hey all,We have recently configured our new App for Microsoft Exchange, and we started to get a lot of perfmon data [... by Tankwell Explorer in IT Operations Discussions 03-05-2021 0 2	0	2
Splunk Add-on for AWS not loading after splunk migration to Splunk8 Hello, I have migrated the splunk from 6.5.3 to 8.0.1, also updated the aws app to 5.0.2 and added python.version=pyt... by sree007 Explorer in IT Operations Discussions 02-24-2021 0 2	0	2
Azure Monitor integration with splunk using webhook Hi All, i would like to integrated Azure monitor with splunk hence Azure team has comes up with option of webhook , R... by dsingh21 Loves-to-Learn in IT Operations Discussions 02-22-2021 0 0	0	0
User Account Audit First and and last logoff events for a 3 month period. Hi i really could use some help, I need to produce a report for the first and last logon events for a couple users ov... by marcusmartin Path Finder in IT Operations Discussions 02-22-2021 0 0	0	0
Oracle Linux 8 splunkforwarder install failing. Operation not permitted I have automated scripts working fine with CentOS 7/8 without issue.When attempting the same installation on OL8 with... by ntamcv Observer in IT Operations Discussions 02-15-2021 0 1	0	1
Export from Splunk to Azure Event Hub What's the best way to forward events from Splunk to Azure Event Hub besides syslog output? Is push via AMQP supporte... by Laroy New Member in IT Operations Discussions 02-05-2021 0 0	0	0
splunk@home +Syslog +MCAS Hello all!I m stucking a bit, and I want to verify some points. I m a technical guy that want to use more professiona... by Interessierter New Member in IT Operations Discussions 12-30-2020 0 0	0	0
Connection from SPLUNK to SCCM Hello,I got the below connection failed message when I’m trying to establish a connection from Splunk server to SCCM ... by dominiqued Explorer in IT Operations Discussions 12-18-2020 0 6	0	6
Easy way to track process CPU usage for windows servers? Hello,We are having some CPU spikes on Windows servers so I am attempting to track utilization from individual proces... by jflaherty Path Finder in IT Operations Discussions 12-03-2020 0 0	0	0
monitor large file system access using monitor of inputs.conf or auditd? We have Linux servers for providing file sharing services like Samba and NFS. We need to monitor the user access acti... by shwu Engager in IT Operations Discussions 11-25-2020 0 0	0	0
How to take the Splunk Admin exam without taking the course first? Hello, Current i have the core user, power user and security Admin exams available to take. I want to take the splk-... by JSMIT595 Explorer in IT Operations Discussions 11-23-2020 0 2	0	2
Splunk ITSI 4.4.0 is compatible with ServiceNow Paris? We have Splunk ITSI 4.4.0 installed here with Splunk Enterprise 8.0.1 ServiceNow here is getting upgraded to the late... by nikhil1011 New Member in IT Operations Discussions 11-19-2020 0 0	0	0
ITSI Predictive Analysis - predictive email alert comes late after the real issue already happened. I set up the Predictive Analysis. However, the email I received that noticed about the issue came late an hour after ... by joycehtran New Member in IT Operations Discussions 11-18-2020 0 0	0	0
Timestamp field not working as expected I have a usecase where my log files have timestamps in various timezones, and I want to generate alerts based on the ... by akpadhi Explorer in IT Operations Discussions 11-13-2020 0 3	0	3
New version available Hello, I just upgraded our company Splunk Enterprise to the latest version on October 16, 2020. However I keep on get... by markbudman Engager in IT Operations Discussions 10-20-2020 0 1	0	1
ITSI Adhoc mstats search not splitting by host entities My base search:\| mstats avg(Processor.%_Processor_Time) AS windows_avgcpu, avg(cpu.idle) AS linux_avgcpuidle, avg(cpu... by Dpeedahnb Explorer in IT Operations Discussions 10-19-2020 1 0	1	0
Microsoft Azure Add on for Splunk : in get mgmt access token raise e ConnectionError Hello.I need your help.I installed the Add-on on the internal network LBF and linked it with Azure.Event Hub data is... by imheejin Explorer in IT Operations Discussions 10-19-2020 0 1	0	1
Multiple Instances of a TA/App Scenario:Team A ask for an app e.g. Splunk App for Jenkins, which is installed and all is well.Now team B comes along... by anapp Explorer in IT Operations Discussions 10-09-2020 0 3	0	3
Passing value from one beta glass table to another in ITSI Hello there, our company is migrating towards beta glass tables. We are attempting to utilise a dropdown to change th... by Dpeedahnb Explorer in IT Operations Discussions 09-29-2020 0 0	0	0