Knowledge Management

Community Activity

is it possible to check Collection Interval is always greater than a specific time for a modular input. Hi, Is there a way to enforce "collection interval" on an addon to be greater than 5 mins. As i don't want users to ... by SudarshanS Explorer in Knowledge Management 06-06-2017 0 4	0	4
Report acceleration, summary updating I've got a dashboard in which the panels depend on accelerated reports. When building these reports, I've let them ru... by mblauw Path Finder in Knowledge Management 06-02-2017 0 8	0	8
What does the check, "Check that embedded links included in the app are not malicious. " mean? App Inspect returns a manual check that requires code reviewers and developers to investigate html links in the app. by dnguyen_splunk Splunk Employee in Knowledge Management 06-01-2017 0 1	0	1
Where do enhancements requests go and why are they not published/voted on? I'd appreciate if anyone from Splunk could answer this question, but I would also like feedback from other Splunk cus... by gjanders SplunkTrust in Knowledge Management 05-31-2017 12 8	12	8
Are the fields created using a summary index "index-time" fields? Hi, I am creating a summary index, and want to makes these fields available via tstats - is that possible? by a212830 Champion in Knowledge Management 05-30-2017 0 3	0	3
New to Splunk: What is a log and security logs? Hi everyone. I'm new to Splunk. what is log? what are security logs? Splunk Log Management system? Please help to... by sandepreddy555 New Member in Knowledge Management 05-25-2017 0 3	0	3
Summary Indexing Not Working Hi All, Looking for guidance for summary indexing usecase for splunk environment. Our splunk environment is shared ... by newbie2tech Communicator in Knowledge Management 05-24-2017 0 4	0	4
What does "Check that use of the Splunk logo and name meets Splunk branding guidelines." mean? The App Inspect tool returns a 'manual check' that requires app reviewers and developers to investigate branding guid... by dnguyen_splunk Splunk Employee in Knowledge Management 05-24-2017 1 1	1	1
Hi I need to do a 100% backup of the full SPLUNK directory and all its contents. Hi I need to do a 100% backup of the full SPLUNK directory and all its contents. We have a tool in the company that ... by robertlynch2020 Influencer in Knowledge Management 05-24-2017 0 1	0	1
How to deal with datamodel retention period as summary range is not working Hi Splunkers, I have been using Splunk Enterprise Security. I have Network_Traffic datamodel running in my environme... by thambisetty_bal Path Finder in Knowledge Management 05-22-2017 2 4	2	4
Problem with evaluated fields in Summary Index populated by sistats -> Not accessible in reports with stats I have a query that has become quite complex and now takes several minutes to run. It seemed a perfect candidate for ... by gavin834 Engager in Knowledge Management 05-22-2017 2 1	2	1
How to get data model acceleration status out of rebuilding? I am attempting to use the Palo Alto Networks App, however the DATA MODEL ACCELERATION STATUS is stuck in REBUILDING.... by niwred1 New Member in Knowledge Management 05-21-2017 0 3	0	3
how to run macro arguments I created a macro with 3 arguments in UI as, sample(3) with definition 'index=shapes sourcetype=rectangle \|search $h... by nivethainspire_ Explorer in Knowledge Management 05-17-2017 0 3	0	3
Summary Index and Field Hi, Maybe I did't understand the documentation. I did a summery index from a query built in my main index. In my m... by sabey New Member in Knowledge Management 05-17-2017 0 3	0	3
Splunk Thinking - I need max(X) when you see Y happen. So I’m struggling with something basic here. I just don’t quite understand how Splunk wants to look at the data, onc... by cmisztur Explorer in Knowledge Management 05-16-2017 0 7	0	7
How could I check for optional keywords and options in custom command? In building a custom command I am trying to validated the presence/absence of an option: Sample code doing the assig... by grimlock Path Finder in Knowledge Management 05-16-2017 0 2	0	2
Best practice for working with large dataset I've got a very large dataset which has got 50 M events each month. I've currently got 3 months indexed, so approx 15... by mblauw Path Finder in Knowledge Management 05-16-2017 0 18	0	18
Is there way to resize/hide large data fields and Index? Hello Please some one help on the below queries I have J SON logs, It has "image" and "sound" fields which has hug... by mala_splunk_91 Explorer in Knowledge Management 05-15-2017 0 10	0	10
What is the procedure to migrate splunk auth mode Hi I am suing splunk enterprise version 6.5 and my current authentication mode is LDAP. What is the procedure to mig... by splunkgk Path Finder in Knowledge Management 05-12-2017 0 3	0	3
metadata with splunk_server How can i add a column that contains the splunk server name to the metadata command below? I can filter based on met... by EricPartington Communicator in Knowledge Management 05-11-2017 1 1	1	1
Can I update KV-Store rows if the key is based on 2 fields? I would like to create a KV-Store that I can update, but the unique key for each row is the combination of 2 fields. ... by gwiner New Member in Knowledge Management 05-10-2017 0 1	0	1
How to find duplicate windows user names Hello all, I'm trying to think of a way to search for instances where a duplicate user account/name has been generate... by ShaunBaker Path Finder in Knowledge Management 05-09-2017 0 4	0	4
Why does the Splunk field summary not show 100 percent for a certain field? Hi All, One of my fields summary in Splunk field bar is not showing 100 percent, even though I have that field in al... by lohitkidu Path Finder in Knowledge Management 05-04-2017 0 7	0	7
For data retention what takes precedence, time or disk usage? We have an index with a retention set to 6 hours or 300 GB of disk space. The index is only 46 GB right now but ther... by scottj1y Path Finder in Knowledge Management 05-03-2017 0 9	0	9
I have a URL as a value of a field in search results. When I click on the URL, how to enable it to open in a new window? Hi, I am doing a simple search, and among the fields extracted, I have a URL as value in one of the fields. My requi... by rleena New Member in Knowledge Management 05-01-2017 0 3	0	3