Monitoring Splunk

Community Activity

	Specific query from Splunk SH to create a Dashboard Hi all, I'm trying to find the specific queries for the SH to create Splunk dashboard of the following info (example)... by splunk_luis12 Path Finder in Monitoring Splunk 01-01-2022 0 1	0	1
	Script for UF Hi all, how can I set the Universal Forwarder to run a script every 5 minute with a cronjobInfo of the script should ... by splunk_luis12 Path Finder in Monitoring Splunk 01-01-2022 0 4	0	4
	Is there a way we can monitor the time taken to complete the fix up tasks and rolling restart of cluster Hi All,We have recently upgraded our splunk enviornment from 7.X to 8.X and we want to compare splunk performance bef... by rahulbhatia Path Finder in Monitoring Splunk 12-31-2021 0 3	0	3
	expression for field extraction extraction of table data 12/27/21 6:42:50.000 AM PSComputerName Name Memory -------------- ---- ... by ravir_jbp Explorer in Monitoring Splunk 12-29-2021 0 1	0	1
	Keep invalid json files Hi, I've set up a Splunk monitor to send some json files to Splunk, however it doesn't send invalid json files. I can... by morganj1 Explorer in Monitoring Splunk 12-13-2021 0 0	0	0
	Splunk Broken Hosts App Alerting False Postives Greetings Fellow Splunkers,We have been recieving false reports claiming certain index, sourcetype and ip combination... by NightShark Path Finder in Monitoring Splunk 12-07-2021 0 0	0	0
	How to find first connect time/version of a universal Forwarder? Hi,I am looking for a way to track when a new Splunk Forwarder connects along with the version. Was hoping to find so... by att35 Builder in Monitoring Splunk 12-06-2021 0 1	0	1
	Query to cumulate endpoint uri How to get cumulate response times for below endpoint. Below is the query i tried. but need similar endpoints should... by saireddy Loves-to-Learn Lots in Monitoring Splunk 12-06-2021 0 2	0	2
	Cannot solve "mvexpand: output will be truncated due to excessive memory usage." Hello,I'm having a problem with mvexpand in Splunk. I'm having the following error:command.mvexpand: output will be t... by carinahOliveira Explorer in Monitoring Splunk 12-02-2021 0 0	0	0
	How do you run btool check against all apps in /opt/splunk/etc/deployment-apps? I want to run btool check against all the apps in /opt/splunk/etc/deployment-apps. Is this possible? by crodri210 Explorer in Monitoring Splunk 11-29-2021 0 9	0	9
	Huge records not getting indexed Hi,I am trying to pull a data from a csv through deployment app but only the field names are getting indexed , data i... by sbhatnagar88 Path Finder in Monitoring Splunk 11-29-2021 0 3	0	3
	For all reported universal forwarders ( Linux and Windows) how do I verify the sources and sourcetype? Hi,There are more than 1000 UF Windows and Linux systems installed. It is a distributed environment with around 100 ... by kagamalai Explorer in Monitoring Splunk 11-25-2021 0 5	0	5
	Best way to alert to new local file creation or update What is the best way (globally for all apps) to detect and report on either the creation of a new file in a /appname/... by jaburke1 Path Finder in Monitoring Splunk 11-24-2021 0 4	0	4
	We need to upgrade the hardware on 1 of our Indexer server. What is the best approach for downtime for this upgrade? Our Splunk Indexer is under resourced. To match Splunk support's recommendations we need to add more RAM to it. We ha... by Gh0st_rid3r Explorer in Monitoring Splunk 11-22-2021 0 6	0	6
	Drilldown menu disappearing Hi guys I'm having a problem my drilldown menu for the panels on my dashboard is disappearing.when I render the dashb... by zubairaizatron Explorer in Monitoring Splunk 11-20-2021 0 4	0	4
	Determining Log Rates/Sizes Our networking team is looking to determine Log Rates for different systems reporting in Splunk.How can we determine ... by SLS-CCU New Member in Monitoring Splunk 11-19-2021 0 2	0	2
	Scheduler concurrency_limit issue with burst on deferred searches Hello community,My client has experienced a severe issue on a Search Head Cluster on past days due to the scheduler b... by rafiki Explorer in Monitoring Splunk 11-19-2021 0 0	0	0
	Monitoring console - Cant see all the information A while ago i set up the monitoring console.However, I am seeing I have some screens working well and others are just... by robertlynch2020 Influencer in Monitoring Splunk 11-17-2021 0 0	0	0
	Nagios Monitoring of Splunk ideas vs Splunk self monitoring Hi all,I'm currently thinking about what to monitor on application level from Splunk Servers using Nagios.Can you giv... by ojay Path Finder in Monitoring Splunk 11-17-2021 0 1	0	1
	Splunk CIM Data Model Acceleration Hello,I am working on a Distributed environment with:- 1x SH with Splunk ES installed (Deployment Server)- 7x Indexer... by IoannisG Explorer in Monitoring Splunk 11-15-2021 0 7	0	7
	Issue with Telegram Alert Action: Can not configure the action Hello everyone,I installed Telegram Alert Action app (https://splunkbase.splunk.com/app/3703/) for my SearchHead serv... by Tony4688 Explorer in Monitoring Splunk 11-14-2021 0 1	0	1
	Splunk indexer is not using the swap We have an issues with big amounts of IO waits alerts on Splunk indexers. After investigation I found there is no swa... by ohpen_splunk Explorer in Monitoring Splunk 11-09-2021 0 8	0	8
	Splunk monitoring console unable to gather Resource usage information Hello,I have a problem with my distributed environment where some of my instances appear greyed out under CPU and mem... by PeraltaRH Explorer in Monitoring Splunk 11-08-2021 0 2	0	2
	CPU Cores assigned to Index Pipeline Hello,In our environment we have Splunk HF with 2 parallel Ingestion Pipelines.https://docs.splunk.com/Documentation/... by edoardo_vicendo Builder in Monitoring Splunk 11-02-2021 0 1	0	1
	Splunkd daemon is not responding: (Error connecting to /services/licenser/localslave/license: (The read operation timed out,),) Hi All, when i am adding a new sever (searched) to the license- master as a slave it is throwing following error "S... by nerelluk New Member in Monitoring Splunk 10-31-2021 0 8	0	8