Monitoring Splunk

Community Activity

forwarders constantly running Is there any way to have a forwarder process not constantly running but rather start up every x hours or so? I'm tryi... by jszyba New Member in Monitoring Splunk 03-19-2014 0 5	0	5
index from forwarders every X minutes/hours Could anybody tell me how to work with the inputs.conf file of a forwarder to set the forwarder to start/stop/index e... by jszyba New Member in Monitoring Splunk 03-19-2014 0 1	0	1
Forwarder Memory I have 3 servers each with a log file. I am planning on installing a universal forwarder on each server to push the i... by jszyba New Member in Monitoring Splunk 03-17-2014 0 3	0	3
Does Splunk persist data? Hi, I would like to know if Splunk will fetch results from source files that are removed either from their location o... by sharat_cwc New Member in Monitoring Splunk 03-14-2014 0 1	0	1
Update to Splunk Deployment Monitor for Version 6 Is there a version of this app that is compatible with Splunk version 6? by steveirogers Communicator in Monitoring Splunk 03-12-2014 0 3	0	3
Error listing accelerated data models - ResponseNotReady All, We are having an issue where one of our Splunk indexers is crashing occasionally. The error we see in the log f... by bruceclarke Contributor in Monitoring Splunk 03-11-2014 1 3	1	3
Splunk web throws "ResponseNotReady" error Several times of the past few weeks we have tried to log into Splunk and have been greeted by a 500 Internal Server E... by sgarvin55 Splunk Employee in Monitoring Splunk 03-10-2014 2 6	2	6
Splunk 5.0.1 - Cannot "Create Dashboard Panel" I cannot create a dashboard panel. I am using Splunk 5.0.1. After running a saved search and getting the results, I... by kmsnyde Explorer in Monitoring Splunk 03-10-2014 0 4	0	4
Monitoring lookup file, adding duplicate records - Sideview Utils The lookup Updater Hi All, I have a lookup file which changes frequently. Currently, we are have a base csv file physically on the serv... by somesoni2 Revered Legend in Monitoring Splunk 03-06-2014 1 8	1	8
sh: btool: command not found I have just installed Splunk 6.0.2 on Mac OS X 10.7.5 and am getting the following error when starting splunk: bash-... by michael_peters Path Finder in Monitoring Splunk 03-06-2014 0 2	0	2
How does Splunk indexer perform on a Sparc T5 machine Old Sparc HW, specially the T1,T2 and T4 CPUs is known to be not well suited for Splunk as it has a rather poor singl... by FritzWittwer_ol Contributor in Monitoring Splunk 03-04-2014 0 1	0	1
How do I trend resource consumption of realtime (scheduled) searches? Any suggestions on techniques (or KPIs) for trending realtime searches within a Splunk environment? I'm doing some s... by Lowell Super Champion in Monitoring Splunk 02-28-2014 1 2	1	2
Ignoring events during indexing Vs ignoring events during search Hi, We use splunk 5.0.4. We have customers with daily log volume ranging from 10GB to 50GB. Our customers do not wa... by strive Influencer in Monitoring Splunk 02-22-2014 0 10	0	10
received event for unconfigured/disabled/deleted index='firewall' with source='source::udp:5447' host='host::x.x.x.x' sourcetype='sourcetype::cisco:asa' (1 missing total) Can't get this working with Splunk for Cisco ASA Set ASA 5505 to forward syslog to usp/5447 with timestamps enabled ... by ionitsupport New Member in Monitoring Splunk 02-13-2014 0 3	0	3
How to get a good measure of load or cpu utilization in windows? I would like to generate a plot of cpu utilization over time. I have some permon events coming in that look like 02... by juniormint Communicator in Monitoring Splunk 02-11-2014 0 1	0	1
Getting this error - then Splunkd crashes.. Error in 'databasePartitionPolicy': Failed to read 1 event(s) from rawdata in bucket '_internal~235~8AD95516-6DE5-4CC... by edenzler Path Finder in Monitoring Splunk 02-11-2014 0 2	0	2
Best distributed search Architecture for Big amount of data per Day Hi All, Currently we are running a stand alone Enterprise version of Splunk(500M/day) on a Windows server. Since Our... by MarMoh Path Finder in Monitoring Splunk 02-11-2014 0 4	0	4
splunk clean eventdata crashes splunk.exe I am executing the following command on a Windows Server 2012 R2 machine with Splunk 6.0.1: C:\Program Files\Splunk\... by helge Builder in Monitoring Splunk 02-10-2014 2 4	2	4
[Splunk Log Management] Is there a performance sheet available to check on how many concurrent clients can connect to splunk server? Need fact sheets for splunk server by kishorecsit Engager in Monitoring Splunk 02-02-2014 0 2	0	2
Splunk and Cisco ASA No Event Data Hello, I have DL'd and installed the following: Splunk App for Cisco ASA ver 1.0 Splunk for Cisco ASA Technology Ad... by brianma New Member in Monitoring Splunk 01-29-2014 0 2	0	2
getting error in splunk 4.2 reagarding indexers hi i am getting an error in splunk as soon as i login the error is "skipped indexing of internal audit event will kee... by rupesh212121 Explorer in Monitoring Splunk 01-23-2014 2 2	2	2
Deployment Monitor Issue - no data in summary indexes I just added a new Universal Forwarder to our Splunk deployment (we previously were running everything on a single se... by apringle Explorer in Monitoring Splunk 01-22-2014 3 7	3	7
Search Head out of disk space due to HUGE audit and _internaldb DBs I am out of disk space on my oldest search head because of this: cd ${SPLUNK_HOME}/var/lib/splunk; du -sh ./* 2> /de... by woodcock Esteemed Legend in Monitoring Splunk 01-22-2014 0 4	0	4
How to measure memory consumed by a summary search result? I have a summary search. I get errors. I need to know how much memory my search consumes. How do I achieve that? ... by MegSplunk Path Finder in Monitoring Splunk 01-16-2014 0 2	0	2
behavior of a "" Hi all, I wanted to know the behavior of . When I do index = *, does it get me all the indexes? I have the follow... by daktapaal Path Finder in Monitoring Splunk 01-14-2014 0 2	0	2