Monitoring Splunk

Monitoring Splunk
Community Activity
jhuebner
I've had both services running on the save Ubuntu 10.04 server for about a week. OSSEC is cooking along gathering in...
by jhuebner Explorer in Monitoring Splunk 10-20-2010
0 1
0
1
Dan
I have a 16 core server (HP DL580) with 32GB MEM and 2TB SAS Drives (RAID 10) capable of 800 IO/sec. I'm indexing abo...
by Dan Splunk Employee Splunk Employee in Monitoring Splunk 10-19-2010
1 6
1
6
Marcin
I keep getting the following error in crash logs on splunk-3.4.12-69236 64 bit. Anyone has any idea what is causing i...
by Marcin Explorer in Monitoring Splunk 10-08-2010
0 1
0
1
gmor
Hi Folks, I could use some pointers troubleshooting some Splunk Web performance issues. Over the last few weeks, ou...
by gmor Explorer in Monitoring Splunk 09-23-2010
1 3
1
3
atulmistry
we have a license for our QA environment for 500MB. We wanted to have the same functions (deployment, alerts, securit...
by atulmistry Engager in Monitoring Splunk 09-20-2010
4 2
4
2
mctester
When I try to start Splunk it gives the following output - Splunk> CSI: Logfiles. Checking prerequisites... Chec...
by mctester Communicator in Monitoring Splunk 09-17-2010
4 4
4
4
sfmandmdev
How do I force splunk to index new files in the directory that is being monitored immediately? sometimes it takes rea...
by sfmandmdev Path Finder in Monitoring Splunk 09-13-2010
1 1
1
1
mzorzi
I can see the maxfiles parameter in $SPLUNK_HOME/etc/system/default/limits.conf for Splunk 4.1.4 , but it is not desc...
by mzorzi Splunk Employee Splunk Employee in Monitoring Splunk 09-10-2010
2 1
2
1
Lowell
Is there a way to explicitly set the reduce_freq for a given saved search? I don't see a dispatch.* option for this ...
by Lowell Super Champion in Monitoring Splunk 09-07-2010
1 1
1
1
Jason
I'm working on a box right now that seems to be unnecessarily slow at both searching as well as indexing from a batch...
by Jason Motivator in Monitoring Splunk 09-07-2010
0 5
0
5
mctester
We created a new index called "foo"; its size is about 6.6GB on disk. Our main index "main" is 66GB. Our daily index...
by mctester Communicator in Monitoring Splunk 09-01-2010
0 1
0
1
tier2ops
I have a search that is taking a few days to run. Here is the search string: sourcetype="bcoat_proxysg" | stats dc(...
by tier2ops Explorer in Monitoring Splunk 08-25-2010
0 3
0
3
dcarlo
I have a Solaris 10 SPARC server that is running Splunk 4.1. It's configured to generate audit logs to syslog, creat...
by dcarlo New Member in Monitoring Splunk 08-22-2010
0 1
0
1
rroberts
What is the significance of cumulative_hits below? Search match hits? number of events returned from a search? 07-09...
by rroberts Splunk Employee Splunk Employee in Monitoring Splunk 08-17-2010
1 3
1
3
roguerr
Crash results in corrupt metadata preventing Splunk from starting up again. Look for following line before crash in s...
by roguerr Engager in Monitoring Splunk 08-09-2010
1 2
1
2
MJTrigwell
Hi, I am having problems getting Splunk to monitor WebSphere V7. I have enabled PMI on WebSphere and installed Splu...
by MJTrigwell Engager in Monitoring Splunk 08-03-2010
2 4
2
4
Michael_Wilde
I've just setup a search head that will search across 2 load balanced indexers.  I'd like to compare the execution ti...
by Michael_Wilde Splunk Employee Splunk Employee in Monitoring Splunk 07-21-2010
1 1
1
1
skippylou
So if I follow the data space and retirement process correctly, it works in a circular manner with old data being del...
by skippylou Communicator in Monitoring Splunk 07-20-2010
1 2
1
2
Lowell
I just upgraded one of my splunk forwarders to version 4.1.4 and now I'm seeing the following error message in my int...
by Lowell Super Champion in Monitoring Splunk 07-20-2010
2 1
2
1
Genti
"Hi support I am receiving a lot of these messages in my light forwarder's splunkd.log 06-29-2010 14:27:05.615 ERROR ...
by Genti Splunk Employee Splunk Employee in Monitoring Splunk 07-02-2010
2 1
2
1
frank_h
on a mac os x server, I am trying to add a directory as input. I encounter the following error when trying to save th...
by frank_h New Member in Monitoring Splunk 07-01-2010
0 1
0
1
omlojoha
Does someone know how much memory and CPU the Splunk agent uses when installed under HP-Ux? And how does the Splunk A...
by omlojoha Engager in Monitoring Splunk 06-29-2010
0 3
0
3
olopez77
I have noticed that Splunkd.log is recording the following error: web_service.log:2010-06-27 12:21:18,769 ERROR Tr...
by olopez77 Explorer in Monitoring Splunk 06-28-2010
2 1
2
1
jambajuice
We've got Splunk running on a Windows 2003 R2 x64 server with 8 GB of memory, and two dual-core 3.0 GHz processors. ...
by jambajuice Communicator in Monitoring Splunk 06-25-2010
1 3
1
3
Jason
A client asks: is there any performance improvement by having multiple indexes? I'm guessing that there would be, if...
by Jason Motivator in Monitoring Splunk 06-22-2010
1 2
1
2
Get Updates on the Splunk Community!

Federated Search for Snowflake Is Now Generally Available on Splunk Cloud Platform

Splunk is excited to announce the General Availability (GA) of Federated Search for ...

Help Us Build Better Splunk Regex Puzzles (And Win Prizes!)

If you’ve spent any time in the Splunk Community Slack, you’ve likely seen our resident Splunk Trust ...

Fuel Your Journey: What’s Waiting for You at the .conf26 Acceleration Station

Navigating the show floor at .conf26 isn't just about keynotes and technical breakout sessions; it's also ...