Run the command:
splunk diag
a splunk-diag.tar.gz file should be generated in your $SPLUNK_HOME dir.
Instructions how to Generate a Diag file to send to support, including how to Anonymize that diagnostic file.
http://docs.splunk.com/Documentation/Splunk/6.0.2/Troubleshooting/Generateadiag
link text
http://docs.splunk.com/Documentation/Splunk/6.0/Troubleshooting/ContactSplunkSupport
link text
http://docs.splunk.com/Documentation/Splunk/6.0.2/Troubleshooting/AnonymizedatasamplestosendtoSuppor...
link text
Run the command:
splunk diag
a splunk-diag.tar.gz file should be generated in your $SPLUNK_HOME dir.
You can get additional options, such as excluding files, by running the help command:
./splunk diag -help help
This changed a bit at some point to need only ./splunk diag --help
or splunk help diag
Heh, note I just changed this so it will be called something like diag-splunkserver-2010-4-5.tar.gz. Coming in 4.1.1 or .2 or so.
And again for 6.2.x soon it will include the time of day upon QA & support request.
How can I email and share the diag with another team? What would be the required steps that I have to take through CLI?