Knowledge Management

Knowledge Management
Community Activity
my_splunk
In our 5.0.2 Splunk version installation we have many simultaneous summary index-populating searches. Sometimes summ...
by my_splunk Path Finder in Knowledge Management 09-30-2013
0 1
0
1
splunkatl
I am getting this error when I clicked on "Built EvenType" in the search results. Does anyone got this error? what ne...
by splunkatl Path Finder in Knowledge Management 09-23-2013
0 3
0
3
usethedata
The collect command has a marker option which can be "A string, usually of key-value pairs, to append to each event w...
by usethedata Path Finder in Knowledge Management 09-21-2013
0 1
0
1
somesoni2
I have a set of 10 saved searches which are doing summary indexing. These searches are running every minute. All the ...
by Revered Legend in Knowledge Management 09-19-2013
1 2
1
2
sc0tt
Our reporting needs are starting to grow so I am planning on creating new summaries and would like to use best practi...
by sc0tt Builder in Knowledge Management 09-19-2013
0 2
0
2
ivantn21
How could I display the event menu for workflows on a results table generated from a "dbquery" command available on t...
by ivantn21 Explorer in Knowledge Management 09-18-2013
0 2
0
2
rmacurak
I've created a new summary index that I'd like to populate with historical data. I cannot seem to find any documenta...
by rmacurak Explorer in Knowledge Management 09-13-2013
0 2
0
2
bruceclarke
All, I'm wondering if there is any setting or workaround in place to just ignore the capitalization for all fields. ...
by bruceclarke Contributor in Knowledge Management 09-11-2013
0 1
0
1
cramasta
Hi, I have been populating my SI using the collect command and have been finding many gaps once i come back and check...
by cramasta Builder in Knowledge Management 09-06-2013
0 1
0
1
Lucas_K
Does anyone have some ways in which they are able to create "report acceleration like" automation into summary index ...
by Lucas_K Motivator in Knowledge Management 09-04-2013
3 5
3
5
TylerTreat
I've been able to start pulling AD logs via WMI which is nice and all, but I come in this morning and have 28 some od...
by TylerTreat Explorer in Knowledge Management 09-03-2013
0 2
0
2
rgcurry
My indexes don't show up in the Web UI and I don't understand what causes that. I have an idea why this happens but I...
by rgcurry Contributor in Knowledge Management 08-21-2013
1 3
1
3
Glenn
Hi, I have created a new app for one of our teams. This includes a new role dma, and new indexes dma_main and dma_su...
by Glenn Builder in Knowledge Management 08-20-2013
5 6
5
6
Simon
Hi There are multiple searches generating different stashed data with different markers, sometimes written to differ...
by Simon Contributor in Knowledge Management 08-06-2013
0 2
0
2
JensT
Hi, I have this search: | inputlookup mySearch | where foo=bar Now I'd like to do this: mySearch(bar) with defin...
by JensT Communicator in Knowledge Management 08-05-2013
0 2
0
2
linu1988
Good Morning/Afternoon to all!! I have a query regarding the dataset returned by |dbquery. If the Database has a tim...
by linu1988 Champion in Knowledge Management 08-05-2013
0 3
0
3
crunchit
Hello, I have a search which I run for monitoring memory usage across different platforms. This has been working well...
by crunchit Engager in Knowledge Management 08-02-2013
0 1
0
1
blodgettb
Splunk allows us to have a tag and an event type with the same name, so what exactly is the difference between an eve...
by blodgettb Engager in Knowledge Management 08-01-2013
3 1
3
1
avitallange
Hi, Is it possible to collect specific rows of a trace file? I have one trace file that contains Info traces and Er...
by avitallange Explorer in Knowledge Management 08-01-2013
0 1
0
1
wgabree
Wondering if setting up a Development Search Head that creates summary indexes by searching Production Indexers would...
by wgabree Engager in Knowledge Management 07-30-2013
1 2
1
2
kenliu
Hi, before Splunk 5 we have created about 40 saved searches that are populating summary index and about 70 other save...
by kenliu Explorer in Knowledge Management 07-24-2013
0 2
0
2
lfetky
I'm currently trying to translate Splunk functions into SAS, and was hoping for some clarification on the prediction ...
by lfetky New Member in Knowledge Management 07-19-2013
0 1
0
1
rbhatia
I want to alias Account_Name field for specific EventCode e.g. EventCode=1234 I want to find that event and alias ...
by rbhatia Explorer in Knowledge Management 06-28-2013
0 5
0
5
anssntaco
Is it possible to define a severity level to an eventtype without using a lookup table? The purpose would be so that,...
by anssntaco Path Finder in Knowledge Management 06-19-2013
0 3
0
3
daniel333
Hello, I only Splunk on a limited basis, about once a month. our Splunk admin has over 300 "eventtypes" created. I ...
by daniel333 Builder in Knowledge Management 06-17-2013
0 1
0
1
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...