Monitoring Splunk

Community Activity

Error while searching and other error in the notification message? Dear Team, Greetings!! I need your help and guidance on the following issue , i keep getting this error in the notifi... by pacifikn Communicator in Monitoring Splunk 01-16-2022 0 1	0	1
Where is the documentation defining the search scheduler.log statuses? Hi I cannot find the documentation that explains the various statuses in the scheduler.logFor example here are a few>... by Glasses Builder in Monitoring Splunk 01-15-2022 1 3	1	3
coldToFrozenScript arguments In the coldToFrozenExample.py script there is a --search-files-required argument switch that it looks for, and if fou... by m22oswald Engager in Monitoring Splunk 01-12-2022 0 3	0	3
What does this message mean regarding the health status of Splunkd? Hello splunkers, I need your help. I have an alert about a bucket on my Splunk. This it the message that I have: ... by julian0125 Explorer in Monitoring Splunk 01-12-2022 2 7	2	7
Why were the logs from existing files not displayed before adding new files to the directory? Hello splunk community!For some context, I started by adding some files into a directory first, then i configured the... by sophiacyh Explorer in Monitoring Splunk 01-06-2022 0 0	0	0
logs missing in splunk Hello,I have configure splunk forwarder to send logs to splunk on 6 servers.logs are psuhing to the splunk for someti... by kharade0009 Loves-to-Learn Lots in Monitoring Splunk 01-05-2022 0 5	0	5
The lookup table does not exist or is not available. Hi everyone,I have an error on my splunk with the below description:"The lookup table '*' does not exist or is not av... by astatrial Contributor in Monitoring Splunk 01-04-2022 0 2	0	2
Searches are failing ion Core SH cluster with failed_because_BUNDLE_SIZE_EXCEEDS_MAX_SIZE. Searches are failing ion Core SH cluster* splunkd.log *Unable to distribute to peer named myindexer00 at uri https://... by sylim_splunk Splunk Employee in Monitoring Splunk 01-03-2022 0 3	0	3
Specific query from Splunk SH to create a Dashboard Hi all, I'm trying to find the specific queries for the SH to create Splunk dashboard of the following info (example)... by splunk_luis12 Path Finder in Monitoring Splunk 01-01-2022 0 1	0	1
Script for UF Hi all, how can I set the Universal Forwarder to run a script every 5 minute with a cronjobInfo of the script should ... by splunk_luis12 Path Finder in Monitoring Splunk 01-01-2022 0 4	0	4
Is there a way we can monitor the time taken to complete the fix up tasks and rolling restart of cluster Hi All,We have recently upgraded our splunk enviornment from 7.X to 8.X and we want to compare splunk performance bef... by rahulbhatia Path Finder in Monitoring Splunk 12-31-2021 0 3	0	3
expression for field extraction extraction of table data 12/27/21 6:42:50.000 AM PSComputerName Name Memory -------------- ---- ... by ravir_jbp Explorer in Monitoring Splunk 12-29-2021 0 1	0	1
Keep invalid json files Hi, I've set up a Splunk monitor to send some json files to Splunk, however it doesn't send invalid json files. I can... by morganj1 Explorer in Monitoring Splunk 12-13-2021 0 0	0	0
Splunk Broken Hosts App Alerting False Postives Greetings Fellow Splunkers,We have been recieving false reports claiming certain index, sourcetype and ip combination... by NightShark Path Finder in Monitoring Splunk 12-07-2021 0 0	0	0
How to find first connect time/version of a universal Forwarder? Hi,I am looking for a way to track when a new Splunk Forwarder connects along with the version. Was hoping to find so... by att35 Builder in Monitoring Splunk 12-06-2021 0 1	0	1
Query to cumulate endpoint uri How to get cumulate response times for below endpoint. Below is the query i tried. but need similar endpoints should... by saireddy Loves-to-Learn Lots in Monitoring Splunk 12-06-2021 0 2	0	2
Cannot solve "mvexpand: output will be truncated due to excessive memory usage." Hello,I'm having a problem with mvexpand in Splunk. I'm having the following error:command.mvexpand: output will be t... by carinahOliveira Explorer in Monitoring Splunk 12-02-2021 0 0	0	0
How do you run btool check against all apps in /opt/splunk/etc/deployment-apps? I want to run btool check against all the apps in /opt/splunk/etc/deployment-apps. Is this possible? by crodri210 Explorer in Monitoring Splunk 11-29-2021 0 9	0	9
Huge records not getting indexed Hi,I am trying to pull a data from a csv through deployment app but only the field names are getting indexed , data i... by sbhatnagar88 Path Finder in Monitoring Splunk 11-29-2021 0 3	0	3
For all reported universal forwarders ( Linux and Windows) how do I verify the sources and sourcetype? Hi,There are more than 1000 UF Windows and Linux systems installed. It is a distributed environment with around 100 ... by kagamalai Explorer in Monitoring Splunk 11-25-2021 0 5	0	5
Best way to alert to new local file creation or update What is the best way (globally for all apps) to detect and report on either the creation of a new file in a /appname/... by jaburke1 Path Finder in Monitoring Splunk 11-24-2021 0 4	0	4
We need to upgrade the hardware on 1 of our Indexer server. What is the best approach for downtime for this upgrade? Our Splunk Indexer is under resourced. To match Splunk support's recommendations we need to add more RAM to it. We ha... by Gh0st_rid3r Explorer in Monitoring Splunk 11-22-2021 0 6	0	6
Drilldown menu disappearing Hi guys I'm having a problem my drilldown menu for the panels on my dashboard is disappearing.zubairaizatron_0-162919... by zubairaizatron Explorer in Monitoring Splunk 11-20-2021 0 4	0	4
Determining Log Rates/Sizes Our networking team is looking to determine Log Rates for different systems reporting in Splunk.How can we determine ... by SLS-CCU New Member in Monitoring Splunk 11-19-2021 0 2	0	2
Scheduler concurrency_limit issue with burst on deferred searches Hello community,My client has experienced a severe issue on a Search Head Cluster on past days due to the scheduler b... by rafiki Explorer in Monitoring Splunk 11-19-2021 0 0	0	0