Monitoring Splunk

Community Activity

How to audit/monitor administrative activity to Splunk? We are trying to audit/monitor administrative activity to Splunk. Is there some canned dashboards or searches that c... by spctravis Explorer in Monitoring Splunk 08-24-2022 0 1	0	1
Is there a way to manually trigger Modular Inputs using rest API? Is there a way to manually trigger modular inputs using the rest API. Most of the advice I've seen involves triggerin... by alecw Splunk Employee in Monitoring Splunk 08-24-2022 0 1	0	1
How do I fix: 'litsearch' command: Unable to parse the search: unbalanced parentheses? I'm an end user! It appears to be just my user account. we dont seem to be able to find the answer When I do any sear... by Mr_Johnson42 Observer in Monitoring Splunk 08-23-2022 0 1	0	1
Why does DB query take a long time to search? Hi. We are using Splunk version of 7.1.3 and DB connect version is 3.6.0. We are planning to upgrade it by end of the... by haripriyas New Member in Monitoring Splunk 08-22-2022 0 0	0	0
How to run btool as REST command or via Search GUI? We were looking to run btool on requirement basis for configs across whole of splunk cluster. It is not feasible to r... by koshyk Super Champion in Monitoring Splunk 08-19-2022 0 8	0	8
How to configure heavy forwarder _internal index forwarding? I have a single instance Splunk Enterprise deployment running on Linux. I have a bunch of data feeding into my indexe... by mike_k Communicator in Monitoring Splunk 08-19-2022 0 3	0	3
Session timeout for a Single username (not group) in Splunk Enterprise Hello, hoping someone can guide me here. Trying to find a way to have a single usernames dashboard session timeout be... by JY1 Engager in Monitoring Splunk 08-17-2022 0 3	0	3
How to create an alert for if any deployment or UF is stops sending data to splunk? hai all, we have multiple forwarders installed nearly 1000above. we want to know if any UF stops sending data to splu... by sekhar463 Path Finder in Monitoring Splunk 08-17-2022 0 2	0	2
How to change the total disk space use in Splunk (hot, cold data)? Hello, Our Splunk system just got an increase in size as image below (we have a Master, 1:1 indexes cluster struture)... by phamxuantung Communicator in Monitoring Splunk 08-16-2022 0 6	0	6
Is there a way to determine Splunk License Usage for a Specific Event Type? Hi, Is there a way to determine Splunk License Usage for a specific event type. I used index=_internal source=*licen... by omprakash9998 Path Finder in Monitoring Splunk 08-15-2022 0 0	0	0
Why is Splunk Management console health check showing indexers failing "Local indexing on non-indexer instances"? All, So my Management Console Health check is flagging my indexers "Local indexing on non-indexer instances". Did I m... by dpwtheitguy Loves-to-Learn Lots in Monitoring Splunk 08-11-2022 0 0	0	0
Is there a way to monitor the status of all lookup files through a search? Is there a way to monitor the status of all lookup files through a search query. I would like to specifically show al... by leftinnerouter Explorer in Monitoring Splunk 08-09-2022 0 1	0	1
Lookup CSV updates for a audit purpose? Hi Team, Can we monitor the lookup files i.e from updates prospective who updates what in a lookup file or even in a ... by joomla Engager in Monitoring Splunk 08-09-2022 0 1	0	1
Cannot search for new file- How do I get Splunk to pick up the file so I can view it in the UI? I am creating a new file in the /var/log directory but when I sure for events I get zero result. How do I get Splunk ... by kielsd1045 New Member in Monitoring Splunk 08-08-2022 0 1	0	1
IndexingQueue gets full on Indexers and forwarders not able to connect to it Indexers are getting blocked periodically throughout the day, causing our heavy forwarders to stop forwarding data.--... by sylim_splunk Splunk Employee in Monitoring Splunk 08-04-2022 1 1	1	1
Why is the Splunk search head eating up swap space? Our 6.6.2 search head (linux 2.6.32-573.18.1.el6.x86_64) is constantly low on free swap space, I tried swapoff -a (... by perfecto25 Path Finder in Monitoring Splunk 08-03-2022 1 2	1	2
How to set up a disk drive space alert when at 75GB? Is there away to setup an alert when the disk drive space is at 75GB and not an alert by % of disk drive space left? by hdhenkel Engager in Monitoring Splunk 07-29-2022 0 1	0	1
How to verify splunk universal forwarder is forwarding all event log data? Good morning / afternoon, I am a cybersecurity professional who has been asked if there is a way to verify that splun... by skimfl Engager in Monitoring Splunk 07-28-2022 0 4	0	4
How to temporarily Disable Monitoring on a Server(s) using PowerShell? I want to temporarily disable alerts on servers while they are being patched or put into maintenance mode. Is it poss... by Strange_Brew Observer in Monitoring Splunk 07-28-2022 0 1	0	1
How to resolve this error: TCPOutAutoLB-0 - More than 70% of forwarding destinations have failed Hi all, I have Splunk instance (standalone) which I get the following error: On the forwarding server the outputs.co... by bugnet Path Finder in Monitoring Splunk 07-26-2022 1 4	1	4
Querying Splunk performance/monitoring metrics programmatically Is there any API we could use to query Splunk performance/monitoring metrics. We want to leverage the data for our in... by sunilsunderraj Engager in Monitoring Splunk 07-22-2022 0 1	0	1
Retrieve/Re-generate SPL search and content of export Hello communityWhat is the most efficient way of retrieving a specific search performed or preferably, if possible, t... by fatsug Builder in Monitoring Splunk 07-22-2022 0 2	0	2
Log showing when Diags were generated? I've been trying to find an _internal or _audit trail log event showing when a Splunk Diag was created on a given ser... by chadmedeiros Path Finder in Monitoring Splunk 07-21-2022 0 1	0	1
How do I change Navigation menu background color based on panel search criteria? Looking to change Navigation menu background color based on panel search criteria. Here idea is i don't want to go on... by nikhil29 Loves-to-Learn Everything in Monitoring Splunk 07-19-2022 0 3	0	3
After Deployment Server upgrade Manager Node is in sick state as Search Peer Hello,I have distributed environment with IDX cluster and DS. DS is used for deploy config to IDX cluster Manager Nod... by lukasmecir Path Finder in Monitoring Splunk 07-15-2022 0 0	0	0