Monitoring Splunk

Community Activity

How to identify network traffic sent from indexers and from search head to user? Is there a way in splunk to identify how much network traffic is being sent from the indexers (not just how much is i... by diegosainz Path Finder in Monitoring Splunk 06-11-2014 1 1	1	1
"Viewstate object not found" error while cloning a search This is Splunk 5.0.1. Fresh install, i.e. not an upgrade from a previous version. Sometimes, when trying to clone a... by bbc Engager in Monitoring Splunk 06-11-2014 1 2	1	2
WARN LMTracker - skipping directive -> Any idea? Any idea about this event in splunkd.log? 02-17-2014 17:36:12.384 +0000 WARN LMTracker - skipping directive, reason... by lpolo Motivator in Monitoring Splunk 06-03-2014 2 3	2	3
Does Hunk create an index? I have created a virtual index with CDH5 and Hunk 6.1. A simple query like the following: index=tomnetflow destinati... by techdiverdown Path Finder in Monitoring Splunk 05-27-2014 0 3	0	3
Splunk Daemon Not Responding Greetings! So, we are running 5.0.3 in SHP (2 SHs) with SSO=permissive. I get this error: 2013-06-06 16:06:41,656 E... by alacercogitatus SplunkTrust in Monitoring Splunk 05-27-2014 0 1	0	1
Excessive diskspace var/run/splunk/dispatch I've noticed that my Splunk searchhead is using more disk space than expected. Traversing through the /opt/splunk dir... by simonroberts2 Engager in Monitoring Splunk 05-21-2014 1 1	1	1
Database query into summary index counts as licensing usage ? Using DB_Connect with dbquery command, if the search results are stored in a summary index, will this count towards t... by ruiaires Path Finder in Monitoring Splunk 05-20-2014 1 2	1	2
Find changed files and diff the first and last versions I am writing app and searches that will find changed files and diff the first and last version of the file: (This is ... by skooby Explorer in Monitoring Splunk 05-19-2014 1 2	1	2
difference between splunkd and splunkweb Hi, Need help to understand difference between splunkd and splunkweb ? What i know is its running in different Ports... by rameshlpatel Communicator in Monitoring Splunk 05-15-2014 1 1	1	1
How does Splunk behave after license expiry? Hello. I looked around for answers in the FAQ and this forum, but was unable to find any. Apologies if this is alread... by kaustubhfab Engager in Monitoring Splunk 05-14-2014 0 1	0	1
Issues Monitoring Fast Rotating Logs - UNIX Hi All, I am running into a few errors on my host that is monitoring some logs in RHEL. One of the logs in question ... by glancaster Path Finder in Monitoring Splunk 05-13-2014 1 2	1	2
Space Issues In my C-drive Hi, Splunk is installed in C-drive C:\Program Files\Splunk\var\log\splunk My Question is can i move the splunk fol... by harshavrath Contributor in Monitoring Splunk 05-13-2014 0 7	0	7
How's CRC key generated in the files less than 256 bytes ? Hi Splunkers, I know that spunk creates a CRC key from initial 256 bytes of the monitoring file and memorize it, so... by sunrise Contributor in Monitoring Splunk 05-11-2014 0 2	0	2
Data Acceleration Frequency In the documentation here, it says that the the data will update every ten minutes once an accelerated report summary... by petermuller Explorer in Monitoring Splunk 05-07-2014 2 3	2	3
Monitor Splunk editing views Does Splunk monitor it self in ways of a user, no matter what role, has been editing or deleting any views? by bleung93 Path Finder in Monitoring Splunk 05-05-2014 0 1	0	1
Unable to find solution for error in splunkd log file Hey I am getting this error in splunkd log file, I am unable to understand what is the error. The error is SearchOp... by shreyasathavale Communicator in Monitoring Splunk 05-04-2014 1 2	1	2
Does the size of a log file impact performance? I'm running on a system with specs lower than they should be, particularly in the RAM department, (which I plan on fi... by aafogles Explorer in Monitoring Splunk 05-02-2014 0 1	0	1
What is Splunkd Doing My indexer is running at 97,8% CPU utalisation and there are about 18 splunkd threads running along with python and s... by hartfoml Motivator in Monitoring Splunk 04-24-2014 0 8	0	8
Splunk Loggin of admin acess We are running a slightly older version of Splunk (4) on Centos 5.5. I have looked around but was just wondering if ... by richard_gosling New Member in Monitoring Splunk 04-22-2014 0 1	0	1
configuration monitoring across multiple boxes I am looking to monitor configuration files (not splunk's config files, but a app's config files). I can use fschang... by kkalmbach Path Finder in Monitoring Splunk 04-21-2014 0 2	0	2
starting splunkd hangs after checking Indexes Hi I'm starting with settingup splunk in my local vagrant box. I dounloaded tar ball and uzipped. From inside the di... by rajalokan New Member in Monitoring Splunk 04-18-2014 0 3	0	3
Configure splunkweb to stop when splunkd crashes We've unfortunately had a few instances now where for various reasons the splunkd processes crashes or otherwise stop... by aengelstad Engager in Monitoring Splunk 04-13-2014 0 2	0	2
Isolated network How to work on isolated network? Can Splunk still work using Firefox to get everything without connection to Splunk h... by tunguyen New Member in Monitoring Splunk 04-13-2014 0 6	0	6
How to see all open files,pipes,network socket open by splunk on Linux? I'd like to see any file open or also network sockets for the splunkd(including forked processes) and splunkweb. by abonuccelli_spl Splunk Employee in Monitoring Splunk 04-07-2014 1 1	1	1
splunkd.log WARN BTreeCP - succeeded, but unable to clean up...fishbucket/splunk_private_db/snapshot.old: Permission denied I see in splunkd.log the following warning. It is confusing as it says it succeeded but unable to cleanup. What does... by Ellen Splunk Employee in Monitoring Splunk 04-04-2014 1 1	1	1