Monitoring Splunk

Community Activity

How to limit datamodel_summary folder disk space Hello guys, i noticed that the datamodel_summary folder is filling up my diskspace... How can i limit this ? It is ... by mbarbaro Path Finder in Monitoring Splunk 08-29-2017 0 2	0	2
Changing timechart x-axis from _time to another field I am looking to chart my data based on another time field than the default _time that splunk uses. is this possible?... by esmonder Path Finder in Monitoring Splunk 08-28-2017 0 1	0	1
What is the expected response time for an HEC POST? We're seeing about 50 ms. Normal range? How would we optimize this? EDIT: Also, how do you measure HEC performance f... by twinspop Influencer in Monitoring Splunk 08-23-2017 1 3	1	3
Using btool command Using btool command i want to check all the conf file or get a list of all conf files where my xyz host entry is pres... by kannu Communicator in Monitoring Splunk 08-21-2017 0 6	0	6
Are there any Splunk apps we can use to audit Oracle behavior like failed logons? I would like to know if there are any Splunk apps which we can use use to audit Oracle behavior e.g failed logons. Sp... by katalinali Path Finder in Monitoring Splunk 08-20-2017 0 2	0	2
Pass privileges from deactive user to active user In splunk cloud I am using splunk cloud for my project, I want to pass on the privileges of a user (who 's I'd is not active anymore)... by Tania19 New Member in Monitoring Splunk 08-19-2017 0 1	0	1
My join command is not extracting data from 2 indexes The below query is the original one, it was working fine in the lower environments, once moved to the production with... by delgendy Explorer in Monitoring Splunk 08-18-2017 0 5	0	5
More than 70% of the syslog messages generated from TZ600 have the firewall action as "N/A" Observed that more than 70% of syslog messages generated from TZ600 is having firewall action as N/A. So can anyone h... by kdevmu New Member in Monitoring Splunk 08-17-2017 0 1	0	1
Index Fidelity for Audit Purposes, proof. I've looked through the Splunk documentation for something that says "Once data is indexed, it cannot be edited". I ... by JDukeSplunk Builder in Monitoring Splunk 08-16-2017 0 3	0	3
NOT a question: There is a small bug in the health checks for 6.5.0 Monitoring Console and this is how to resolve it. There appears to be a bug in splunk_monitoring_console\default\checklist.conf. After running the Health Checks, the ... by lycollicott Motivator in Monitoring Splunk 08-16-2017 7 11	7	11
How does the addinfo command work with time? The new fields that are created when using the addinfo cmd info_min_time The earliest time boundary for the search... by Esky73 Builder in Monitoring Splunk 08-15-2017 0 1	0	1
What does splunkd do? I see splunkd.service taking up a lot of CPU time. It runs as high as 50% most of the time. by terryloar Path Finder in Monitoring Splunk 08-15-2017 0 1	0	1
Why do I see "Access Denied" page when I access the Answers page? I see "Access Denied" page when I try to open any Splunk Answers page. I could open it when I am logged out. Also wh... by ss026381 Communicator in Monitoring Splunk 08-07-2017 0 1	0	1
What is the best storage solution for optimal Splunk performance? When planning my Splunk deployment, I've been told that the storage volume is probably the most important aspect. Wh... by mctester Communicator in Monitoring Splunk 08-04-2017 4 4	4	4
role Permission on local.meta I have local.meta file in that i have specified the app's read permission to some Role's like 3 different roles so th... by vikasreddy Explorer in Monitoring Splunk 08-01-2017 0 1	0	1
splunkd service does not start when the server is rebooted Hi, I have a problem where splunkd services does not start at reboot of the server. The startup type is set to auto... by wendyctlam Explorer in Monitoring Splunk 07-28-2017 1 8	1	8
Redirect port 80 to port 443? Hi everyone. I just installed a custom cert this afternoon on our development search head, and after some stumbling w... by msarro Builder in Monitoring Splunk 07-28-2017 0 4	0	4
Timed out waiting for splunkd to shutdown I can't restart splunk. Neither CLI or web manager works. It just times out waiting for splunkd to shut down. Thing ... by kenison New Member in Monitoring Splunk 07-25-2017 0 2	0	2
6.6.1 License Violation due to auto_generated_pool-enterprise There was a license violation because the auto_generated_pool-enterprise had gone over the license of 1GB indexing. F... by molinarf Communicator in Monitoring Splunk 07-24-2017 0 3	0	3
Splunkd monitoring and getting stopped by itself Hi guys, I have came across a new problem and want to ask one question on how the splunkd process is running. Let u... by kannu Communicator in Monitoring Splunk 07-19-2017 0 3	0	3
Forwarder instance is not showing in indexer monitor console I have setup a universal forwarder to an Indexer. I have done below configurations, but the forwarder instance is not... by 722624 Path Finder in Monitoring Splunk 07-14-2017 0 5	0	5
Unable to locate an inputs stanza sending a data to a particular index using btool ? Hi All, we are removing the unwanted indexes from prod environment as they are deprecated, while performing this acti... by Hemnaath Motivator in Monitoring Splunk 07-10-2017 0 7	0	7
"Couldn't determine $SPLUNK_HOME, perhaps it should be set in environment" $ cd /opt/splunkforwarder/bin $ ./splunk status Couldn't determine $SPLUNK_HOME, perhaps it should be set in environm... by madhanbaskar Explorer in Monitoring Splunk 07-08-2017 1 5	1	5
How does Splunk check for ulimit Hopefully somebody can point us to a right direction: We have multisite indexer cluster: two sites, 4 indexers per s... by mlevsh Builder in Monitoring Splunk 07-07-2017 0 8	0	8
how to make my splunk work fast ?? Hi , Actually my splunk has 6 yrs of data , i think this is the reason for the slowness . Now i need to make this fa... by umsundar2015 Path Finder in Monitoring Splunk 07-04-2017 0 3	0	3