Monitoring Splunk

Community Activity

Search Head Cluster Slow performance Cluster Member on Version : 6.2.1 and has three Search Head Cluster Memeber: Issue : 1) When user run’s adhoc... by sat94541 Communicator in Monitoring Splunk 01-25-2024 0 4	0	4
How to fix aggregration issue for sourcetype Hi,I have seen a aggregration issue for one of my source type cisco, how can I fix this issue in my splunk cloud ?12... by AL3Z Builder in Monitoring Splunk 01-23-2024 0 3	0	3
need to build a query how to find out whose account is not showing no_access on splunk roles, who are disabled from AD? Hello guysHope you are doing great!I want to configure a query, some guys are disabled in AD and also, in Splunk ES w... by anilkumarmeka Observer in Monitoring Splunk 01-11-2024 0 0	0	0
HttpInputDataHandler - Parsing error : No data Hello there, I got the following error a lot: "ERROR HttpInputDataHandler - Parsing error : No data" I guess it is re... by D2SI Communicator in Monitoring Splunk 01-11-2024 1 11	1	11
SIgnalFx dimensions.AWSUniqueId is empty Hi All,I have created a detector that monitors splunk environment. I am trying to customize message in alert message ... by Poojitha Communicator in Monitoring Splunk 01-09-2024 0 0	0	0
Issue with Security Command Center Logs Not Appearing in Splunk Hi,We set up Security Command Center to send alerts to Splunk for detecting mining activity. However, I've observed t... by AL3Z Builder in Monitoring Splunk 01-05-2024 0 1	0	1
Resource impact when extending search job lifetime Hi,I'm still new to Splunk and I understand that I can extend search or report lifecycle either using GUI or change t... by ahmadkhilfi Engager in Monitoring Splunk 01-05-2024 0 4	0	4
Critical System Physical Memory Usage Oracle Linux 7.5Splunk Core 7.2.5Alert Name -- DMC Alert - Critical System Physical Memory UsageThe alert works on be... by cybermonday Explorer in Monitoring Splunk 01-02-2024 0 1	0	1
How can I transfer workflow action in my current splunk machine to a new splunk machine Hi , in my current splunk I have builded a lot of work flow action, when I want to upload all my workflow action into... by trinhgiahan New Member in Monitoring Splunk 12-27-2023 0 2	0	2
Change output location of splunk diag? I've seen from personal experience, as well as the answer at http://answers.splunk.com/questions/167/how-do-i-generat... by smisplunk Path Finder in Monitoring Splunk 12-22-2023 3 5	3	5
How to confirm does my index have duplicate events? Hi, When I execute this search index=foo \| stats count by _raw, sourcetype, source, host \| where count>1 , I'm able t... by AL3Z Builder in Monitoring Splunk 12-14-2023 0 1	0	1
Setting the threshold for the detect large outbound ICMP Packets correlation Hi,Could someone assist me in setting the threshold for this correlation search in ES? It's generating an excessive n... by AL3Z Builder in Monitoring Splunk 12-13-2023 0 1	0	1
Indexing and reading .tsidx files/directory-stored logs? Hello!Our Splunk server receives dc logs on a daily basis from another network team. Under Files & Directories in Dat... by katmbro Engager in Monitoring Splunk 12-13-2023 0 2	0	2
How to check the splunk licence spike issues Hi, We are seeing the sudden spike of the license consumption in our splunk es since last week,Where do we get to see... by AL3Z Builder in Monitoring Splunk 12-09-2023 0 2	0	2
How does DMC calculate Load Average How does DMC calculate load average? I understand the number comes from rest api. But it does not explain how exactly... by htidore Path Finder in Monitoring Splunk 12-06-2023 0 1	0	1
The Splunkd Services are not working after starting/restarting the services and it is getting stopped, tried several tim Hello The Splunkd Services are not working after starting/restarting the services and it is getting stopped, I have ... by Amolsbhalerao New Member in Monitoring Splunk 12-04-2023 0 2	0	2
How to set permission to read ALL knowledge Objects Hello,I would like to create a compliance user by allowing read only access to all knowledge objects and dashboards i... by NightShark Path Finder in Monitoring Splunk 12-04-2023 0 3	0	3
InputLookup to monitor data inputs I have a lookup file called TA_feeds.csv with six columns labeled below with multiple rows similar to the one below. ... by DaveBunn Path Finder in Monitoring Splunk 12-01-2023 0 1	0	1
Query to compare total throughput for two distinct dates I would like to compare total throughput for two dates 60 days apart (say, current and -60d). The query in the CMC th... by chama4tem Loves-to-Learn in Monitoring Splunk 11-30-2023 0 5	0	5
Zabbix Agents monitoring splunk servers HiHas anyone had issues monitoring splunk servers with zabbix agents. Just monitoring no integration or log ingestion... by mark71 Engager in Monitoring Splunk 11-28-2023 0 1	0	1
How to fix "Percentage of small buckets is high"? I am getting below error from Splunkd. How to fix this root cause error. Please suggest some workaround. by uagraw01 Motivator in Monitoring Splunk 11-27-2023 0 2	0	2
AwsSDK [12369 ExecProcessor] - CurlHttpClient Curl returned error code 28 - Timeout was reached We are getting error in our splunkd.log can you please help to resolve it? 11-21-2023 11:50:33.289 -0700 WARN AwsSD... by akpadhi Explorer in Monitoring Splunk 11-22-2023 0 0	0	0
Forwarder info metrics (group=tcpin_connections) claims that ssl=false while SSL enable between indexer and forwarder Indexer discovery enable on forwarder. by hrawat Splunk Employee in Monitoring Splunk 11-21-2023 0 0	0	0
Splunk Universal Forwarder(9.1.1) consume a lot of CPU and memory I deployed splunk universal forwarder 9.1.1 on Linux servers which are running on VPC VSI in IBM Cloud.Some servers a... by Manami New Member in Monitoring Splunk 11-17-2023 0 1	0	1
Logging in Splunk Enterprise Hi! This is a very basic question. First time working with Splunk Enterprise Platform.How do you actually go about sw... by gayathrc Engager in Monitoring Splunk 11-16-2023 0 6	0	6