Monitoring Splunk

Community Activity

Put Data in Separate Index Based on Timestamp We have Splunk as part of our default vm image but we're having some bucket issues. Initially, the time isn't set an... by oreoshake Communicator in Monitoring Splunk 03-17-2010 2 1	2	1
When should I use a FIFO for an input? I notice there is support for fifo's as inputs. Are there any benefits to using a fifo or is it just support for thos... by Erik_Swan Splunk Employee in Monitoring Splunk 03-13-2010 1 2	1	2
How do I set the default PAGE, instead of just the default app? I've followed the instructions on http://www.splunk.com/base/Documentation/4.0.9/Developer/DefaultApp to set the defa... by oreoshake Communicator in Monitoring Splunk 03-10-2010 6 2	6	2
Timestamp logic/config on forwarder or indexer? I looked at the report for timestamping errors and found a fair amount of errors. I’ve been following the Splunk blo... by oreoshake Communicator in Monitoring Splunk 03-10-2010 0 5	0	5
ERROR SavedSplunker - No record for that user Seeing this error in splunkd.log on a splunk indexer when running a saved search. What does it mean? by Jaci Splunk Employee in Monitoring Splunk 03-01-2010 2 1	2	1
performance characteristics of dedup command I'm thinking about using the DEDUP commend to solve the following problem: I have an event with an ID field and I'd l... by Justin_Grant Contributor in Monitoring Splunk 01-22-2010 2 1	2	1
What sort of hardware should I use for my splunk install? I will have 100GB coming in per day, with an expectation of 20 concurrent users at any given time, with probably arou... by jrodman Splunk Employee in Monitoring Splunk 01-20-2010 2 1	2	1