Monitoring Splunk

Monitoring Splunk
Community Activity
coleman07
I want to keep more than 5 copies of eventgen.log. The log file is located in /opt/splunk/var/log/splunk, but is not ...
by coleman07 Path Finder in Monitoring Splunk 01-30-2016
0 1
0
1
rck
How can I compare the t_done event in Splunk Web performance for last week's data and current data?
by rck New Member in Monitoring Splunk 01-27-2016
0 2
0
2
chris
Hi, we recently installed new indexer servers to help the existing indexer servers that were under heavy load. The n...
by chris Motivator in Monitoring Splunk 01-27-2016
0 5
0
5
preben12
Splunkd has crashed a couple of times now. The only thing I see in splunkd.log is some log WARNS eg. 12-09-2013 07:...
by preben12 Communicator in Monitoring Splunk 01-26-2016
0 6
0
6
twinspop
For any one search id, there are many, sometimes hundreds, of log entries in introspection. Not all of these have CPU...
by twinspop Influencer in Monitoring Splunk 01-22-2016
0 1
0
1
mataharry
My Splunk instance crashed and it won't restart with this error in splunkd.log: 01-30-2013 18:29:05.094 +0000 WARN l...
by mataharry Communicator in Monitoring Splunk 01-20-2016
8 8
8
8
hagjos43
One of my windows indexers is constantly writing to the btool log in DEBUG mode. I didn't build this environment, but...
by hagjos43 Contributor in Monitoring Splunk 01-20-2016
0 4
0
4
gfreitas
Hi, I'm using Splunk Mobile to connect from an iPad to my Splunk server and it's working properly. There are some pa...
by gfreitas Builder in Monitoring Splunk 01-15-2016
1 2
1
2
jrubio1
Hello everyone, I'm fairly new to Splunk and currently have the issue where the Splunk server is above 93% disk util...
by jrubio1 New Member in Monitoring Splunk 01-13-2016
0 1
0
1
mgaraventa_splu
On our cluster master server, we saw the following message: The minimum free disk space (5000MB) reached for /opt/s...
by mgaraventa_splu Splunk Employee Splunk Employee in Monitoring Splunk 01-13-2016
6 2
6
2
adamblock2
We are currently running a distributed Splunk 6.2.3 infrastructure with multiple indexers. According to the Distribu...
by adamblock2 Path Finder in Monitoring Splunk 01-08-2016
0 1
0
1
rameshnani
When a SPLUNK server is rebooted, SPLUNK is cleanly shutdown When SPLUNK vm is powered off, SPLUNK is cleanly shutdo...
by rameshnani New Member in Monitoring Splunk 12-23-2015
0 1
0
1
mataharry
I have a indexer, that crashed and I restored. I can start splunkd and splunkweb services, but cannot use the CLI, o...
by mataharry Communicator in Monitoring Splunk 12-18-2015
1 2
1
2
javiergn
Hi all, Because of regulatory reasons, we might need to use FIPS in our brand new Splunk deployment. I've been going...
by javiergn Super Champion in Monitoring Splunk 12-14-2015
0 7
0
7
nhurtaud
Hi everyone, Thank you for your time. My question is sample: is it possible to cap this three parameters: - CPU - R...
by nhurtaud Explorer in Monitoring Splunk 12-14-2015
0 3
0
3
sonia_splunk
Hello Everyone, 1) I had installed Splunk on Windows 2008 R2 a month ago. 2) Everything was good. 3) Today I have in...
by sonia_splunk New Member in Monitoring Splunk 12-11-2015
0 3
0
3
rkursawe
It's not really a question, but could you please change your _internal log message: The maximum number of concurrent...
by rkursawe Explorer in Monitoring Splunk 12-09-2015
0 2
0
2
mataharry
I found this in my splunkd.log and It seems linked to the setting rdnsMaxDutyCycle in limits.conf I assume that it tr...
by mataharry Communicator in Monitoring Splunk 12-02-2015
1 4
1
4
splunkLPN
The splunkd process only uses the power of one logical core dispatch on all processors. Is there a way to use all the...
by splunkLPN Path Finder in Monitoring Splunk 12-01-2015
0 1
0
1
melonman
Hi I was in the doc, Block Signing feature has been removed from Splunk 6.2. I need to have a indexed data integrit...
by melonman Motivator in Monitoring Splunk 11-30-2015
0 1
0
1
aneaston
I have the following search query which does what I'd like: sourcetype=my_log | eval adj_request_id = if(isnotnull(o...
by aneaston New Member in Monitoring Splunk 11-19-2015
0 2
0
2
cmaier
Just curious if anyone out there has had any experience getting their Office 365 Administrator Audit Logs into Splunk...
by cmaier Explorer in Monitoring Splunk 11-19-2015
0 2
0
2
hylam
17 GB IIS log files, 2.5 GB 100% accelerated data model. 16 cores 8 GB RAM with 2 GB RAM free. The pivot was single-c...
by hylam Contributor in Monitoring Splunk 11-12-2015
0 20
0
20
mikaelbje
Distributed Management Console Reporting incorrect amount of CPU cores for indexers This is seen in both Splunk 6.2.6...
by mikaelbje Motivator in Monitoring Splunk 11-11-2015
0 1
0
1
leo_wang
Dear Splunkers : I try to search "index=_audit" to audit config-change events of our Splunk servers. (For Example : ...
by leo_wang Path Finder in Monitoring Splunk 11-05-2015
0 4
0
4
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Classic British Rock Bands

This puzzle series (first published here) is based on extracting information from statements about well-known ...

New to the Community? Join Us for an Exclusive Post .conf26 Welcome Session (Plus a ...

Keep the .conf26 Energy Going: Welcome to the Splunk Community! Whether we scanned your badge at the Community ...

Accelerate Splunk App Development with AI

  Learn how to automate the repetitive parts of your build cycle.   Register to Attend   Join our Tech Talk ...