Monitoring Splunk

Community Activity

Monitor statement for syslog server Trying to figure out the correct monitor statement for my inputs.conf for logs being sent to my syslog server. /var/... by basketballah21 Engager in Monitoring Splunk 03-25-2019 0 1	0	1
Why receiving resource usage errors in splunkd.log "Failure getting value for disk reads" Every minute log this message. I want to know cause of error message and know workaround. 02-27-2017 17:55:04.455 +0... by kksol007 Engager in Monitoring Splunk 03-21-2019 1 3	1	3
What is the best way to measure current license usage? While trying to root cause a huge influx of logs into my instance I noticed that querying my current license usage th... by fhlbcsplunkbase Explorer in Monitoring Splunk 03-20-2019 0 4	0	4
_audit index assistance Does anyone know how to setup a stats table for the _audit with all data in that index? Mainly listing all the data i... by reneedeleon Engager in Monitoring Splunk 03-18-2019 0 1	0	1
help on coalesce command with bad performances Hi I use the function coalesce but she has very bad performances because I have to query a huge number of host (5000... by jip31 Motivator in Monitoring Splunk 03-18-2019 0 1	0	1
Monitoring a text file Issue I am trying to extract some information from a text file. This is how my inputs.conf looks like, [monitor://C:\Temp\... by Channu New Member in Monitoring Splunk 03-14-2019 0 4	0	4
Using python external lookup An error occurs when requesting an HTTPS website I have a simple external lookup python script that implements a simple post request and returns the result to the sp... by bestSplunker Contributor in Monitoring Splunk 03-13-2019 0 5	0	5
Getting "top 3" (Windows) processes, sorted by CPU usage, when CPU usage goes over xx% Hello everyone, Pretty new to Splunk and, to be honest, I'm going under in work so I don't have time to work myself ... by so_edv1 New Member in Monitoring Splunk 03-10-2019 0 2	0	2
O365 Audit log Data Store sizing I am looking for a sizing calculator for dumping O365 audit logs into Splunk Siem. Such as average log size per email... by ryanbradshaw New Member in Monitoring Splunk 03-07-2019 0 0	0	0
Configuration to achieve better performance of Splunk I want to carry out performance monitoring of Splunk. I came across this benchmark while browsing https://docs.splunk... by swatishs Explorer in Monitoring Splunk 03-07-2019 0 1	0	1
monitoring log truncated We have a service where logs are truncated. Example, we have hola.log that fridays copy all content to new file hola2... by rjfv8205 Path Finder in Monitoring Splunk 03-06-2019 0 1	0	1
How can we measure two removed monitored files? A customer asked to remove two monitored files, which I did today. They asked - -- Is there a way we can get the ex... by ddrillic Ultra Champion in Monitoring Splunk 03-05-2019 0 5	0	5
Change splunkd management port on Universal forwarder I would like to change the splunk management port from 8089 to some higher port say 9089. What is the best way to do ... by skrish91 Path Finder in Monitoring Splunk 03-04-2019 0 3	0	3
How to Produce a Log for "Splunk Forwarder Removal" Hello Splunkers, I would like to keep track of my machines that contain a Splunk forwarder by producing a log of the... by zekiramhi Path Finder in Monitoring Splunk 03-04-2019 0 3	0	3
In Splunk, why am I getting the following error: "contains invalid UTF-8 encoding". In the Splunk search head, while checking the Splunk status in the search head, I found the following messages contin... by dkolekar_splunk Splunk Employee in Monitoring Splunk 03-03-2019 0 1	0	1
Splunk stops randomly I have been having issues with my splunk where the splunk service stops randomly. here are some logs from splunkd.log... by junshenchoo Engager in Monitoring Splunk 03-03-2019 0 4	0	4
How do I start Splunk after it stopped responding with ERROR ProcessRunner? I received the below error. Now, none of the Splunk start or stop commands are responding. Please let us know how we ... by abhijitnath89bm New Member in Monitoring Splunk 03-01-2019 0 1	0	1
Monitoring infraestructure Hello splunkers, could you help me how monitoring infraestructure (machine, cpu, ram, disk usage, etc) from Hp Non St... by rjfv8205 Path Finder in Monitoring Splunk 03-01-2019 0 1	0	1
Is there a keep alive check for Splunkd in a load balancer environment? Hey, How can we configure a load balancer to check that splunkd is running on a server before the load balancer forw... by Ant1D Motivator in Monitoring Splunk 02-28-2019 0 5	0	5
Which is more efficient - filldown or streamstats ... \| sort _time \| filldown l_lat l_lon by UID \| table _time UID w_tbys w_tbyr l_lat l_lon or ... \| sort _time \| ... by simpkins1958 Contributor in Monitoring Splunk 02-23-2019 0 3	0	3
Why UF consuming so much swap Hello Trying to figure out why my UF is consuming 37GB of swap space Ran some commands and here are the results [s... by tkw03 Communicator in Monitoring Splunk 02-22-2019 0 7	0	7
How much disk space is included with the standard Splunk Cloud license? We are currently considering migration to Splunk Cloud. The retention period for some of our indexes are up to 14 mon... by polymorphic Communicator in Monitoring Splunk 02-21-2019 2 16	2	16
how to get total hit count value for traffic passing through ANY ANY rule on firewall: I have a firewall which have a rule with any as source destination and ports, I need to monitor this traffic and chec... by hadiamro Engager in Monitoring Splunk 02-21-2019 0 2	0	2
We need to give only DMC access to users from L1 team. We need to give only DMC access to users from L1 team. We dont need the team to have admin or power role access can s... by vikram_m Path Finder in Monitoring Splunk 02-21-2019 0 3	0	3
Is it possible to devolve access to DMC to users other than admin role users? Hi - I've been trying to test to see if it is possible to provide access to the DMC to a role outside of a Splunk Adm... by 340213 Engager in Monitoring Splunk 02-21-2019 2 4	2	4