Monitoring Splunk

Monitoring Splunk
Community Activity
jhuebner
I've had both services running on the save Ubuntu 10.04 server for about a week. OSSEC is cooking along gathering in...
by jhuebner Explorer in Monitoring Splunk 10-20-2010
0 1
0
1
Dan
I have a 16 core server (HP DL580) with 32GB MEM and 2TB SAS Drives (RAID 10) capable of 800 IO/sec. I'm indexing abo...
by Dan Splunk Employee Splunk Employee in Monitoring Splunk 10-19-2010
1 6
1
6
Marcin
I keep getting the following error in crash logs on splunk-3.4.12-69236 64 bit. Anyone has any idea what is causing i...
by Marcin Explorer in Monitoring Splunk 10-08-2010
0 1
0
1
gmor
Hi Folks, I could use some pointers troubleshooting some Splunk Web performance issues. Over the last few weeks, ou...
by gmor Explorer in Monitoring Splunk 09-23-2010
1 3
1
3
atulmistry
we have a license for our QA environment for 500MB. We wanted to have the same functions (deployment, alerts, securit...
by atulmistry Engager in Monitoring Splunk 09-20-2010
4 2
4
2
mctester
When I try to start Splunk it gives the following output - Splunk> CSI: Logfiles. Checking prerequisites... Chec...
by mctester Communicator in Monitoring Splunk 09-17-2010
4 4
4
4
sfmandmdev
How do I force splunk to index new files in the directory that is being monitored immediately? sometimes it takes rea...
by sfmandmdev Path Finder in Monitoring Splunk 09-13-2010
1 1
1
1
mzorzi
I can see the maxfiles parameter in $SPLUNK_HOME/etc/system/default/limits.conf for Splunk 4.1.4 , but it is not desc...
by mzorzi Splunk Employee Splunk Employee in Monitoring Splunk 09-10-2010
2 1
2
1
Lowell
Is there a way to explicitly set the reduce_freq for a given saved search? I don't see a dispatch.* option for this ...
by Lowell Super Champion in Monitoring Splunk 09-07-2010
1 1
1
1
Jason
I'm working on a box right now that seems to be unnecessarily slow at both searching as well as indexing from a batch...
by Jason Motivator in Monitoring Splunk 09-07-2010
0 5
0
5
mctester
We created a new index called "foo"; its size is about 6.6GB on disk. Our main index "main" is 66GB. Our daily index...
by mctester Communicator in Monitoring Splunk 09-01-2010
0 1
0
1
tier2ops
I have a search that is taking a few days to run. Here is the search string: sourcetype="bcoat_proxysg" | stats dc(...
by tier2ops Explorer in Monitoring Splunk 08-25-2010
0 3
0
3
dcarlo
I have a Solaris 10 SPARC server that is running Splunk 4.1. It's configured to generate audit logs to syslog, creat...
by dcarlo New Member in Monitoring Splunk 08-22-2010
0 1
0
1
rroberts
What is the significance of cumulative_hits below? Search match hits? number of events returned from a search? 07-09...
by rroberts Splunk Employee Splunk Employee in Monitoring Splunk 08-17-2010
1 3
1
3
roguerr
Crash results in corrupt metadata preventing Splunk from starting up again. Look for following line before crash in s...
by roguerr Engager in Monitoring Splunk 08-09-2010
1 2
1
2
MJTrigwell
Hi, I am having problems getting Splunk to monitor WebSphere V7. I have enabled PMI on WebSphere and installed Splu...
by MJTrigwell Engager in Monitoring Splunk 08-03-2010
2 4
2
4
Michael_Wilde
I've just setup a search head that will search across 2 load balanced indexers.  I'd like to compare the execution ti...
by Michael_Wilde Splunk Employee Splunk Employee in Monitoring Splunk 07-21-2010
1 1
1
1
skippylou
So if I follow the data space and retirement process correctly, it works in a circular manner with old data being del...
by skippylou Communicator in Monitoring Splunk 07-20-2010
1 2
1
2
Lowell
I just upgraded one of my splunk forwarders to version 4.1.4 and now I'm seeing the following error message in my int...
by Lowell Super Champion in Monitoring Splunk 07-20-2010
2 1
2
1
Genti
"Hi support I am receiving a lot of these messages in my light forwarder's splunkd.log 06-29-2010 14:27:05.615 ERROR ...
by Genti Splunk Employee Splunk Employee in Monitoring Splunk 07-02-2010
2 1
2
1
frank_h
on a mac os x server, I am trying to add a directory as input. I encounter the following error when trying to save th...
by frank_h New Member in Monitoring Splunk 07-01-2010
0 1
0
1
omlojoha
Does someone know how much memory and CPU the Splunk agent uses when installed under HP-Ux? And how does the Splunk A...
by omlojoha Engager in Monitoring Splunk 06-29-2010
0 3
0
3
olopez77
I have noticed that Splunkd.log is recording the following error: web_service.log:2010-06-27 12:21:18,769 ERROR Tr...
by olopez77 Explorer in Monitoring Splunk 06-28-2010
2 1
2
1
jambajuice
We've got Splunk running on a Windows 2003 R2 x64 server with 8 GB of memory, and two dual-core 3.0 GHz processors. ...
by jambajuice Communicator in Monitoring Splunk 06-25-2010
1 3
1
3
Jason
A client asks: is there any performance improvement by having multiple indexes? I'm guessing that there would be, if...
by Jason Motivator in Monitoring Splunk 06-22-2010
1 2
1
2
Get Updates on the Splunk Community!

Quick connection discovery mode for forwarders

When a Splunk forwarder loses connectivity to its indexers, it does not always reconnect immediately. In many ...

Build and Launch AI Agents from Your Splunk Workflows

  Register We’ve all been there: juggling alerts, runbooks, and endless manual searches. What if you could ...

Splunk Cloud Application Management in Terraform

Register   On Tuesday, August 4 at 11AM PDT / 2PM EDT, we’re diving into how you can bring Infrastructure as ...
Top Solution Authors