Monitoring Splunk

Community Activity

Can splunk-optimize kill my box? Last night around 2345 a splunk-optimize process seems to have kicked off, and my server has essentially been unrespo... by howyagoin Contributor in Monitoring Splunk 04-26-2011 0 2	0	2
How does indexing affect hard drive space? I am indexing to the main index and it has a max size of 500000 MB defined. So far, I have indexed about 14,000 MB o... by sthao New Member in Monitoring Splunk 04-26-2011 0 3	0	3
Deployment Monitor upgrade Tried to update Deployment Monitor to newer version via the application manager, had a comment a new version was avai... by gobofo New Member in Monitoring Splunk 04-25-2011 0 1	0	1
Low in disk space. Indexing has been paused. I am getting this message, when I start splunk (version 4.2): 'You are low in disk space on partition "/opt/splunk/v... by albert_newton New Member in Monitoring Splunk 04-14-2011 0 3	0	3
How many files does ignoreOlderThan help with? I have a couple of directories with 120,000 files in each. This is a file every 5 minutes or so for the last 6 months... by vbumgarner Contributor in Monitoring Splunk 04-14-2011 1 1	1	1
Why is Splunk writing errors to splunkd.log when I set memory limits above the minimum requirement? As an alternative to relying on the Splunk 4.1.7 Light Forwarder to set and manage its own upper memory usage limit I... by mctester Communicator in Monitoring Splunk 04-13-2011 0 1	0	1
Inputlookup vs. summary index performance If I have a bunch of events in a tabular format that I wish to search for various charts on a dashboard, is it faster... by jambajuice Communicator in Monitoring Splunk 04-12-2011 1 2	1	2
Monitor doesn't work with env variable in inputs.conf I observed that none of the log files are not indexed into Splunk when I used the environment variable, in my case it... by Nicholas_Key Splunk Employee in Monitoring Splunk 04-11-2011 0 5	0	5
Splunk Daemon Crashing Just downloaded Splunk 4.1.3 for windows 32 bit. Running Windows 7 32 bit Enterprise Edition. This is what I am get... by cfalzone New Member in Monitoring Splunk 04-01-2011 0 2	0	2
Can I make my LWF (lightwieght forwarder) even MORE lightweight that it is out-of-the-box (i.e. Super LightWeight)? If so, how? What else can I disable or streamline such that my LWF takes up even less local resources? by maverick Splunk Employee in Monitoring Splunk 03-28-2011 1 4	1	4
Splunk - monitoring a wireshark file i'm newbie to splunk and i'm trying to get splunk monitor a capture file from Wireshark. i set wireshark to capture t... by offtheboxuser Engager in Monitoring Splunk 03-25-2011 2 3	2	3
Monitor,transforms? I am trying to monitor a file on a forwarder. I don't wish to send all the contents, as there is unnecessary data in... by jgauthier Contributor in Monitoring Splunk 03-24-2011 0 4	0	4
Monitor multi directory and using whitelisting I have to monitorize multiple log such access_log, error_log and xferlog_regular files in a different categories. The... by roccotocco New Member in Monitoring Splunk 03-23-2011 0 1	0	1
Interpreting execution costs on the Job Inspector page. Are there any docs or other helpful resources to help explain the Execution costs chart on the Job Inspector page? H... by Lowell Super Champion in Monitoring Splunk 03-22-2011 6 4	6	4
why is the windows app generating crash reports in my windows event logs ? Since I deployed the windows app on my forwarder, I am seeing crashes reported in my windows event logs. But splunk i... by yannK Splunk Employee in Monitoring Splunk 03-18-2011 1 3	1	3
Crash with error "/opt/splunk/p4/splunk/branches/prince/src/search/processors/SortProcessor.cpp:297: bool rescomp_t::operator<(rescomp_t) const: Assertion `first.size() == other.first.size()' failed." Whenever do a particular search, Splunk always crashes with error "/opt/splunk/p4/splunk/branches/prince/src/search... by zliu Splunk Employee in Monitoring Splunk 03-18-2011 0 2	0	2
where to save rotated logs? my question exactly means that suppose my logs are rotated constantly. for example access.log becomes access.log1 aft... by rupesh212121 Explorer in Monitoring Splunk 03-18-2011 0 3	0	3
where the rotated logs get save in splunk where the rotated logs get saved in splunk. by rupesh212121 Explorer in Monitoring Splunk 03-18-2011 0 1	0	1
Sending to different index based on host from syslog stream Ok, so I'm not sure what I'm doing wrong here. I need to send data coming in on the standard syslog UDP 514 stream b... by dkoski Engager in Monitoring Splunk 03-10-2011 1 9	1	9
inputs.conf precendence I am having problems with splunk configuration file precedence. I have two inputs.conf in my splunk app. One in defa... by jasonnadeau Explorer in Monitoring Splunk 03-08-2011 2 2	2	2
Is RAID controller driver necessary for Redhat 5.6 Hi, We shall install SPLUNK on new IBM x3650M3 server with 12 SAS HD, 8 GB RAM and 2 E5630 CPU. OS is Redhat 5.6. RAI... by frankyip Engager in Monitoring Splunk 02-17-2011 0 1	0	1
What is the 'stash' sourcetype for in the PCI Application I have been monitoring our license consumption and the 'stash' sourcetype is showing up consistently. I've poked aro... by jambajuice Communicator in Monitoring Splunk 02-07-2011 2 1	2	1
Is there an app to analyize splunks logs? I was wondering if anyone has put an app together that watches Splunks logs? There are many details in the log, espe... by fk319 Builder in Monitoring Splunk 02-07-2011 0 3	0	3
How to configure Field Perf Benchmark App What actually needs to be configured within Perf Test's tasks.conf file. Also do the following global values need to... by Blu3fish Path Finder in Monitoring Splunk 02-05-2011 1 3	1	3
How to use ‘Field Perf Benchmark’ App I just installed the ‘Field Perf Benchmark’ and I always have a ‘No results found’ in each pan of the App. When I lo... by jplaberge Engager in Monitoring Splunk 02-05-2011 1 5	1	5