Monitoring Splunk

Community Activity

What is the 'stash' sourcetype for in the PCI Application I have been monitoring our license consumption and the 'stash' sourcetype is showing up consistently. I've poked aro... by jambajuice Communicator in Monitoring Splunk 02-07-2011 2 1	2	1
Is there an app to analyize splunks logs? I was wondering if anyone has put an app together that watches Splunks logs? There are many details in the log, espe... by fk319 Builder in Monitoring Splunk 02-07-2011 0 3	0	3
How to configure Field Perf Benchmark App What actually needs to be configured within Perf Test's tasks.conf file. Also do the following global values need to... by Blu3fish Path Finder in Monitoring Splunk 02-05-2011 1 3	1	3
How to use ‘Field Perf Benchmark’ App I just installed the ‘Field Perf Benchmark’ and I always have a ‘No results found’ in each pan of the App. When I lo... by jplaberge Engager in Monitoring Splunk 02-05-2011 1 5	1	5
btool relocation error I get following error when trying to execute btool root@usmaster: # btool Warning: program compiled against libxml 2... by LCM Contributor in Monitoring Splunk 02-04-2011 1 1	1	1
Monitoring a file in windows forwarder on Splunk instance on Linux Hi, I have a Windows server 2003 which forwards data to Splunk instance on a Linux box. I want the file c:\Program Fi... by achouras New Member in Monitoring Splunk 02-01-2011 0 3	0	3
Strange behavior when searching on large events I'm running Splunk 4.1.6 (89596) 64-bit on Windows 7. I'm using Chrome as my browser. If I search on a sourcetype t... by jambajuice Communicator in Monitoring Splunk 01-31-2011 1 3	1	3
Error updating saved search dhcpd_alert_new_mac_address_15m I'm trying to make this search not email out (to example.com) so I've gone into the searches and reports and have unt... by lisa_1 Explorer in Monitoring Splunk 01-25-2011 1 1	1	1
How do I configure Splunk to use multiple locations to store index data? We are starting to run low on disk space on our Splunk server. We have a 500GB disk dedicated to Splunk data, and it'... by Mick Splunk Employee in Monitoring Splunk 01-19-2011 2 5	2	5
SplunkD service never starts successfully after a clean install SplunkD never starts successfully. This is the first time Splunk has ever been installed on this machine. The machi... by toddler316 New Member in Monitoring Splunk 01-17-2011 0 2	0	2
Any concern to use Splunk directly on the servers where the critical applications are running? Hiya Thinking of using Splunk but worry Splunk takes too much PC resources if use it directly on the servers where t... by xiaotao New Member in Monitoring Splunk 01-14-2011 0 1	0	1
How to search usage of "view"? I know I can monitor the usage of saved search by saved_search_name from _audit index. However, I can't find equivale... by hochit Path Finder in Monitoring Splunk 12-30-2010 1 1	1	1
ERROR DatabaseDirectoryManager::Bucket 11-09-2010 00:00:57.985 INFO WatchedFile - File too small to check seekcrc, probably truncated. Will re-read entire... by vadud3 Path Finder in Monitoring Splunk 12-24-2010 1 1	1	1
How to embed google analytics code to all splunk pages? Hi, I want to use google analytics to get user trace. In which template should I put the google analytics code so th... by melonman Motivator in Monitoring Splunk 12-16-2010 0 1	0	1
How to minimize splunk's memory usage Is it possible to explicitly define how much memory splunk (splunkd and splunkweb) is allowed to use? Thanks by domengph Engager in Monitoring Splunk 12-10-2010 1 4	1	4
rotate input data Hello, It looks like I'm running out of space on my splunk server. Here is the error that I received when running a... by spowell New Member in Monitoring Splunk 12-08-2010 0 1	0	1
Performance difference between using SEDCMD and older REGEX/TRANSFORMS method Is there a performance difference between using the SEDCMD syntax in just props.conf versus using the older method wh... by DrewO Splunk Employee in Monitoring Splunk 12-02-2010 3 3	3	3
Sizing a Splunk installation- and a license question too. We're considering moving our Splunk environment from AIX to a Linux x86 box for performance reasons. My particular de... by Branden Builder in Monitoring Splunk 12-01-2010 0 3	0	3
A FusionIO ioDrive card with splunk? Has anyone used an ioDrive for their splunk? I'm really curious if anyone can speak to the crazy high IOPS & throughp... by gfriedmann Communicator in Monitoring Splunk 11-26-2010 3 2	3	2
Does fschange use inotify / ReadDirectoryChangesW or similar? Does Splunk make full use of operating system specific features when monitoring for changed files? In particular, I'... by southeringtonp Motivator in Monitoring Splunk 11-11-2010 1 1	1	1
With coldToFrozenScript, what is responsible for deleting the bucket? When you specify a coldToFrozenScript in indexes.conf, what is responsible for deleting the cold bucket from the inde... by dwaddle SplunkTrust in Monitoring Splunk 11-10-2010 2 1	2	1
Migrating colddb buckets to new storage. Hi, In an attempt to increase the available storage for indexes, I am looking at moving the colddb indexes to an add... by mgherman Explorer in Monitoring Splunk 11-08-2010 3 2	3	2
monitor latest file only I write a script to blacklist the oldest file but splunk don't reload inputs.conf until someone restart the services ... by katalinali Path Finder in Monitoring Splunk 11-08-2010 0 3	0	3
Looking for "high performance Splunk" A client is looking for advice on tuning splunk for what they call "high performance" - defined as minimizing cpu, ne... by Jason Motivator in Monitoring Splunk 11-05-2010 0 2	0	2
Monitoring Logfiles with random number as part of the name Our logfiles are named in the format Log.Activity.prod.###.txt where ### is random number. Also we want to leave out ... by rvbalaji Explorer in Monitoring Splunk 11-04-2010 0 7	0	7