Monitoring Splunk

Community Activity

Looking for a change in the index _indextime rate I want to identify where the rate that an index's _indextime changes by a specific amount, with a tolerence that incr... by mconnarty1 Explorer in Monitoring Splunk 02-20-2024 0 3	0	3
How can I calculate CPU of the splunk server in percentage from the data in internal index? How can I calculate CPU of the splunk server in percentage from the data in internal index?The data in internal index... by kate Path Finder in Monitoring Splunk 02-09-2024 0 7	0	7
Splunk DB Hi team ,1 .How to monitor the Splunk DB logs, already installed and configured.2. How to 2 queries of splunk db inge... by vijreddy30 Loves-to-Learn Everything in Monitoring Splunk 02-09-2024 0 1	0	1
How to find users restoring and running searches on historic data sets I am attempting to identify when Splunk users are running searches against historic data (over 180 days old). Additio... by sh Engager in Monitoring Splunk 02-07-2024 0 1	0	1
.zip, .gz , .tar files are not getting indexed in splunk I have a server where logs are generated on daily basis in this format-/ABC/DEF/XYZ/xyz17012022.zip /ABC/DEF/XYZ... by rohanaik19 Engager in Monitoring Splunk 02-06-2024 0 1	0	1
DMC not displaying server metrics On our Monitoring Console on the "Overview", it does not display any metrics under "Resource Usage" for each of the c... by tlmayes Contributor in Monitoring Splunk 02-05-2024 0 6	0	6
Splunk query for getting logs in descending order based on API execution time Can some one help me with query for getting logs in descending order based on API execution time which printed on log... by athul_r_m New Member in Monitoring Splunk 01-29-2024 0 1	0	1
Search Head Cluster Slow performance Cluster Member on Version : 6.2.1 and has three Search Head Cluster Memeber: Issue : 1) When user run’s adhoc... by sat94541 Communicator in Monitoring Splunk 01-25-2024 0 4	0	4
How to fix aggregration issue for sourcetype Hi,I have seen a aggregration issue for one of my source type cisco, how can I fix this issue in my splunk cloud ?12... by AL3Z Builder in Monitoring Splunk 01-23-2024 0 3	0	3
need to build a query how to find out whose account is not showing no_access on splunk roles, who are disabled from AD? Hello guysHope you are doing great!I want to configure a query, some guys are disabled in AD and also, in Splunk ES w... by anilkumarmeka Observer in Monitoring Splunk 01-11-2024 0 0	0	0
HttpInputDataHandler - Parsing error : No data Hello there, I got the following error a lot: "ERROR HttpInputDataHandler - Parsing error : No data" I guess it is re... by D2SI Communicator in Monitoring Splunk 01-11-2024 1 11	1	11
SIgnalFx dimensions.AWSUniqueId is empty Hi All,I have created a detector that monitors splunk environment. I am trying to customize message in alert message ... by Poojitha Communicator in Monitoring Splunk 01-09-2024 0 0	0	0
Issue with Security Command Center Logs Not Appearing in Splunk Hi,We set up Security Command Center to send alerts to Splunk for detecting mining activity. However, I've observed t... by AL3Z Builder in Monitoring Splunk 01-05-2024 0 1	0	1
Resource impact when extending search job lifetime Hi,I'm still new to Splunk and I understand that I can extend search or report lifecycle either using GUI or change t... by ahmadkhilfi Engager in Monitoring Splunk 01-05-2024 0 4	0	4
Critical System Physical Memory Usage Oracle Linux 7.5Splunk Core 7.2.5Alert Name -- DMC Alert - Critical System Physical Memory UsageThe alert works on be... by cybermonday Explorer in Monitoring Splunk 01-02-2024 0 1	0	1
How can I transfer workflow action in my current splunk machine to a new splunk machine Hi , in my current splunk I have builded a lot of work flow action, when I want to upload all my workflow action into... by trinhgiahan New Member in Monitoring Splunk 12-27-2023 0 2	0	2
Change output location of splunk diag? I've seen from personal experience, as well as the answer at http://answers.splunk.com/questions/167/how-do-i-generat... by smisplunk Path Finder in Monitoring Splunk 12-22-2023 3 5	3	5
How to confirm does my index have duplicate events? Hi, When I execute this search index=foo \| stats count by _raw, sourcetype, source, host \| where count>1 , I'm able t... by AL3Z Builder in Monitoring Splunk 12-14-2023 0 1	0	1
Setting the threshold for the detect large outbound ICMP Packets correlation Hi,Could someone assist me in setting the threshold for this correlation search in ES? It's generating an excessive n... by AL3Z Builder in Monitoring Splunk 12-13-2023 0 1	0	1
Indexing and reading .tsidx files/directory-stored logs? Hello!Our Splunk server receives dc logs on a daily basis from another network team. Under Files & Directories in Dat... by katmbro Engager in Monitoring Splunk 12-13-2023 0 2	0	2
How to check the splunk licence spike issues Hi, We are seeing the sudden spike of the license consumption in our splunk es since last week,Where do we get to see... by AL3Z Builder in Monitoring Splunk 12-09-2023 0 2	0	2
How does DMC calculate Load Average How does DMC calculate load average? I understand the number comes from rest api. But it does not explain how exactly... by htidore Path Finder in Monitoring Splunk 12-06-2023 0 1	0	1
The Splunkd Services are not working after starting/restarting the services and it is getting stopped, tried several tim Hello The Splunkd Services are not working after starting/restarting the services and it is getting stopped, I have ... by Amolsbhalerao New Member in Monitoring Splunk 12-04-2023 0 2	0	2
How to set permission to read ALL knowledge Objects Hello,I would like to create a compliance user by allowing read only access to all knowledge objects and dashboards i... by NightShark Path Finder in Monitoring Splunk 12-04-2023 0 3	0	3
InputLookup to monitor data inputs I have a lookup file called TA_feeds.csv with six columns labeled below with multiple rows similar to the one below. ... by DaveBunn Path Finder in Monitoring Splunk 12-01-2023 0 1	0	1