Monitoring Splunk

Monitoring Splunk
Community Activity
ejharts2015
We recently resized our indexer cluster from a 3 node to a 4 node. We've ran the "rebalance" command from the master ...
by ejharts2015 Communicator in Monitoring Splunk 12-02-2018
2 7
2
7
ddrillic
We have this standard query - index=<index name> sourcetype=*prod clientID=*aaa OR clientID=bbbb OR clientID=*ccc OR...
by ddrillic Ultra Champion in Monitoring Splunk 12-02-2018
0 5
0
5
greich
we are using 6.5.2 Enterprise> On new search heads, the core logs have been moved to a symlink: ls -l /opt/splunk/va...
by greich Communicator in Monitoring Splunk 11-30-2018
0 1
0
1
grantsmiley
I have a chart that shows a time series, for example, let's say it's the # of donuts sold by noon every day for a mon...
by grantsmiley Path Finder in Monitoring Splunk 11-30-2018
0 6
0
6
marvinlee93
Is it possible to display real-time values with an auto-refresh rate of 0.1sec on a timechart/single-value display? ...
by marvinlee93 Explorer in Monitoring Splunk 11-30-2018
0 4
0
4
marcus_santos_s
Regards, I am making a plan for organic splunk growth for the next year. The main question is: How to calculate the...
by marcus_santos_s Path Finder in Monitoring Splunk 11-28-2018
0 6
0
6
jip31
Hello I tried to combine the first query (before | append) with the subsearch ( [ search index=.........) but it doe...
by jip31 Motivator in Monitoring Splunk 11-23-2018
0 4
0
4
SathyaNarayanan
Hi, I have uploaded 15 csv files in splunk from local by Add data option and view in the search. After some days i...
by SathyaNarayanan Path Finder in Monitoring Splunk 11-22-2018
0 2
0
2
AndreaSimon
We are trying to ingest Peregrine logs for Asset Manager and we can open the log file up on the windows server and it...
by AndreaSimon New Member in Monitoring Splunk 11-21-2018
0 2
0
2
king2jd
Hello, We have a non-clustered indexer environment. We have one indexer (blue line) that is always well above the CP...
by king2jd Path Finder in Monitoring Splunk 11-21-2018
0 2
0
2
adale25
How do I join the time field with a different field name from a CSV lookup file, with the time field specified in an ...
by adale25 Engager in Monitoring Splunk 11-20-2018
0 5
0
5
rickyhsu7
Hi All, I have used Splunk Machine Learning Toolkit. I have a learned model, and I could use it to predict with new ...
by rickyhsu7 Explorer in Monitoring Splunk 11-19-2018
1 0
1
0
marrette
Indexer Capacity Planning - linking indexing and search performance: how does one effect the office? I'm attempting ...
by marrette Path Finder in Monitoring Splunk 11-15-2018
1 5
1
5
shayhibah
Hi, I would like to browse for apps and install app from the Splunk user interface. For some reason, I get the foll...
by shayhibah Path Finder in Monitoring Splunk 11-14-2018
1 7
1
7
swhittier
I installed the Website Monitoring App v2.7 and completed the setup. After that I changed the index to point to "webs...
by swhittier Engager in Monitoring Splunk 11-14-2018
1 1
1
1
reed0080
We currently have a number of new print servers and a legacy print cluster (Server 2008R2). We have configured Window...
by reed0080 New Member in Monitoring Splunk 11-11-2018
0 0
0
0
moizmmz
How can I view the monitoring console if I've been given the .pem file and the jumpbox ip address? Basically, I'm tr...
by moizmmz Path Finder in Monitoring Splunk 11-09-2018
0 3
0
3
HenryFitzerald
Hi , Could anyone please assist me in this query. It’s running very slowly 6hrs in one case; query does a join on t...
by HenryFitzerald New Member in Monitoring Splunk 11-09-2018
0 1
0
1
splunkingsplun1
Receiving the following error message in S.o.S. Splunk in the splunkd.log: 12-28-2013 16:32:28.175 -0500 ERROR ExecP...
by splunkingsplun1 Explorer in Monitoring Splunk 11-08-2018
0 3
0
3
BP9906
I've had Splunk for sever major releases (4.x to present) and now as our environment has evolved, our /opt/splunk/var...
by BP9906 Builder in Monitoring Splunk 11-07-2018
0 3
0
3
damucka
Hello, I would like to harvest the files with the "statements" pattern in the name. The examples would be: /usr/sap...
by damucka Builder in Monitoring Splunk 11-06-2018
0 4
0
4
srbhvatsa
0 down vote favorite I am new to AWS platform and started using it 3 months back. I launched a EC2 instance which was...
by srbhvatsa New Member in Monitoring Splunk 11-05-2018
0 0
0
0
Log_wrangler
I received a warning Search peer ip-1-1-1-1.ec2.internal has the following message: skipped indexing of internal au...
by Log_wrangler Builder in Monitoring Splunk 11-04-2018
0 6
0
6
lewisj
I get the following error before I even get to do anything with Splunk on docker 7.2.0. Disk Space Root Cause(s): Th...
by lewisj New Member in Monitoring Splunk 11-02-2018
0 1
0
1
siva_cg
Hi, Will there be any impact on Splunk performance if we use tstats very extensively, like more than 10 panels in si...
by siva_cg Path Finder in Monitoring Splunk 10-30-2018
0 1
0
1
Claim a $25 Cisco Store Gift Card
Help us improve the Splunk Community and complete our survey today!
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...
Top Solution Authors