Monitoring Splunk

Community Activity

sh: btool: command not found I have just installed Splunk 6.0.2 on Mac OS X 10.7.5 and am getting the following error when starting splunk: bash-... by michael_peters Path Finder in Monitoring Splunk 03-06-2014 0 2	0	2
How does Splunk indexer perform on a Sparc T5 machine Old Sparc HW, specially the T1,T2 and T4 CPUs is known to be not well suited for Splunk as it has a rather poor singl... by FritzWittwer_ol Contributor in Monitoring Splunk 03-04-2014 0 1	0	1
How do I trend resource consumption of realtime (scheduled) searches? Any suggestions on techniques (or KPIs) for trending realtime searches within a Splunk environment? I'm doing some s... by Lowell Super Champion in Monitoring Splunk 02-28-2014 1 2	1	2
Ignoring events during indexing Vs ignoring events during search Hi, We use splunk 5.0.4. We have customers with daily log volume ranging from 10GB to 50GB. Our customers do not wa... by strive Influencer in Monitoring Splunk 02-22-2014 0 10	0	10
received event for unconfigured/disabled/deleted index='firewall' with source='source::udp:5447' host='host::x.x.x.x' sourcetype='sourcetype::cisco:asa' (1 missing total) Can't get this working with Splunk for Cisco ASA Set ASA 5505 to forward syslog to usp/5447 with timestamps enabled ... by ionitsupport New Member in Monitoring Splunk 02-13-2014 0 3	0	3
How to get a good measure of load or cpu utilization in windows? I would like to generate a plot of cpu utilization over time. I have some permon events coming in that look like 02... by juniormint Communicator in Monitoring Splunk 02-11-2014 0 1	0	1
Getting this error - then Splunkd crashes.. Error in 'databasePartitionPolicy': Failed to read 1 event(s) from rawdata in bucket '_internal~235~8AD95516-6DE5-4CC... by edenzler Path Finder in Monitoring Splunk 02-11-2014 0 2	0	2
Best distributed search Architecture for Big amount of data per Day Hi All, Currently we are running a stand alone Enterprise version of Splunk(500M/day) on a Windows server. Since Our... by MarMoh Path Finder in Monitoring Splunk 02-11-2014 0 4	0	4
splunk clean eventdata crashes splunk.exe I am executing the following command on a Windows Server 2012 R2 machine with Splunk 6.0.1: C:\Program Files\Splunk\... by helge Builder in Monitoring Splunk 02-10-2014 2 4	2	4
[Splunk Log Management] Is there a performance sheet available to check on how many concurrent clients can connect to splunk server? Need fact sheets for splunk server by kishorecsit Engager in Monitoring Splunk 02-02-2014 0 2	0	2
Splunk and Cisco ASA No Event Data Hello, I have DL'd and installed the following: Splunk App for Cisco ASA ver 1.0 Splunk for Cisco ASA Technology Ad... by brianma New Member in Monitoring Splunk 01-29-2014 0 2	0	2
getting error in splunk 4.2 reagarding indexers hi i am getting an error in splunk as soon as i login the error is "skipped indexing of internal audit event will kee... by rupesh212121 Explorer in Monitoring Splunk 01-23-2014 2 2	2	2
Deployment Monitor Issue - no data in summary indexes I just added a new Universal Forwarder to our Splunk deployment (we previously were running everything on a single se... by apringle Explorer in Monitoring Splunk 01-22-2014 3 7	3	7
Search Head out of disk space due to HUGE audit and _internaldb DBs I am out of disk space on my oldest search head because of this: cd ${SPLUNK_HOME}/var/lib/splunk; du -sh ./* 2> /de... by woodcock Esteemed Legend in Monitoring Splunk 01-22-2014 0 4	0	4
How to measure memory consumed by a summary search result? I have a summary search. I get errors. I need to know how much memory my search consumes. How do I achieve that? ... by MegSplunk Path Finder in Monitoring Splunk 01-16-2014 0 2	0	2
behavior of a "" Hi all, I wanted to know the behavior of . When I do index = *, does it get me all the indexes? I have the follow... by daktapaal Path Finder in Monitoring Splunk 01-14-2014 0 2	0	2
Error - Your Entry was not saved. The following error was reported: server abort We had an index that had incorrect timestamp mapping. To correct this we exported all the log entries for the index ... by mookiie2005 Communicator in Monitoring Splunk 01-07-2014 0 1	0	1
Restrict users to fire complex query \| force kill the complex query ! Background : I am using Splunk verion 4.3.3 , having 4 indexer with 1 Search head and using the default configuration... by chimbudp Contributor in Monitoring Splunk 01-06-2014 0 5	0	5
Splunk 6 not reading all files in a folder Hi All, I have created a java program which is generating 20 log files whose names are like this. l1DebugQueue.log ... by somesoni2 Revered Legend in Monitoring Splunk 01-03-2014 0 3	0	3
performance considerations for eventtypes? I've been looking at the "Search Job Inspector" recently and noticing that command.search.typer is often showing up a... by Lowell Super Champion in Monitoring Splunk 12-20-2013 32 16	32	16
Splunk crashes repeatedly (Cannot open manifest file...) Splunk started crushing with crash logs enries like this: [build 182037] 2013-11-14 11:02:27 Received fatal signal 6... by iKate Builder in Monitoring Splunk 12-20-2013 1 4	1	4
splunkd keeps on crashing (crashing thread: archivereader) Hey, i am currently experiencing severe problems with my splunk installation since splunkd repeatedly crashes right a... by ESIMatNeforce Path Finder in Monitoring Splunk 12-19-2013 3 9	3	9
CERN HTTPD Access Control Bypass (Splunkd service) Vulnerability scanning software returned the following result for a handful of systems in my environment: "There exi... by rgilliam Engager in Monitoring Splunk 12-19-2013 1 1	1	1
Errors - minimum free disk space - point SPLUNK to new drive Basic (free) SPLUNK has been set up on our network, gathering the basic syslog from our firewalls. I'm new here and ... by m_martinson New Member in Monitoring Splunk 12-17-2013 0 1	0	1
Deletion of event data in a index for performance Hello, I would like to know if deletion of events which are not required will increase the search performance? They a... by linu1988 Champion in Monitoring Splunk 12-10-2013 0 3	0	3