Other Using Splunk

Category Activity

Create an alert (Splunk query) for different nodes where if the status of the node goes down and doesn't come up within 1 hour then an alert should trigger. Hi Guys, I am Just creating a rule for a switch for multiple nodes where if the status of the switch goes down and d... by Inayath_khan Path Finder in Alerting 02-26-2020 0 5	0	5
How to combine multiple reports into one report from same index? Hey guys, Is it possible to combine 3 reports (bar charts) from the same index into one report (bar chart)? Thanks in... by limalbert Path Finder in Reporting 02-26-2020 0 18	0	18
Running php script in alert with adding results as arguments Hello Ninjas! I need help with setting an alert which triggers a php script with results. This script should pass the... by damiko Communicator in Alerting 02-25-2020 0 37	0	37
Email alerts to SMTP Relay We are trying to set up email alerts. We cannot send directly to the internal exchange system. How can I set up spl... by jackbigt New Member in Alerting 02-25-2020 0 1	0	1
What capability or capabilities do we need to enable for non-admin users to have access to "Advanced Edit" on Saved Report? Hi, For some power users, we need them to be able to get to Advanced Edit on report. They need to be able to change d... by mlevsh Builder in Reporting 02-25-2020 0 4	0	4
Splunk Alert on defined condition Hi, I have a SPL search that is producing counts for two values for my monitored application's transactions, Success... by mbasharat Builder in Alerting 02-25-2020 0 1	0	1
Force/Keep search saved as "Report" to stay on "Statistics" tab? When saved as a Dashboard Panel there is a Visualization called Statistics Table (and also Events) but these are not ... by woodcock Esteemed Legend in Reporting 02-25-2020 0 1	0	1
700+ jobs running created on Jan 1, 1970 Hello, We have more than 700 jobs with status parsing on the indexer.We able to delete these jobs only after stopping... by sec_team_albara New Member in Reporting 02-25-2020 0 7	0	7
That pesky 10k limit when emailing a report I seem to be running into the 10K limit when I export via email, while manually downloading the data works just fine.... by leica0000 Engager in Reporting 02-25-2020 0 0	0	0
How to tell if accelerated data model is still rebuilding? Hello. I have a data model that has been rebuilding for close to 24 hrs. This seems plausible since it is working on ... by jamesvz84 Communicator in Reporting 02-25-2020 1 6	1	6
Alert - Field no longer reporting data. Is there a way to make an alert when a interesting field is no longer sending data? by alexrod03 New Member in Alerting 02-25-2020 0 1	0	1
how to change submitbutton function The submit button will not change the search if the time and condition are the same. To solve this problem, is there ... by jinseong Path Finder in Alerting 02-24-2020 0 1	0	1
What is the best and most efficient way to write alert for index with no events? What is the best and most efficient way to write alert for index with no events? I have the following index=_inte... by dannyze Explorer in Alerting 02-23-2020 0 7	0	7
Data model acceleration not working HelloIm running splunk data model acceleration And it stopped working. It is stuck in skipping and nothing happensWit... by sarit_s Communicator in Reporting 02-22-2020 0 3	0	3
How to ignore the duplicate count Hi Team, As per below output I want to know the exact count of disconnected status of each server_name by ignoring t... by ManojPottella New Member in Alerting 02-20-2020 0 1	0	1
Splunk alert result(s) to a dashboard input and then email results How can I send alert result(s) to a dashboard input and then email dashboard results? Please let me know if anybody h... by pateriaak Explorer in Alerting 02-19-2020 0 2	0	2
errors in custom alert action Hello, We created a custom alert action as per documentation and try to trigger it. We get the following errors: 2/... by damucka Builder in Alerting 02-19-2020 0 1	0	1
multireport HelloIs there any documentation about multireport ?I couldn't find any. thanks by sarit_s Communicator in Reporting 02-19-2020 0 1	0	1
Alert Suppression Until Value Is Back In Control I have an alert set up to check our output against a lower control limit and a lower alarm limit. Right now it will p... by sochsenbein Communicator in Alerting 02-19-2020 0 6	0	6
Generate report for top 10 web category usage Hey guys, I'm trying to complete a report to show the top web users in my environment that are accessing websites tha... by dharveynswccd Path Finder in Reporting 02-18-2020 0 9	0	9
datamodel acceleration on multiple search heads Hello, Can you declare a datamodel acceleration on one search head and use the accelerated data from another server? ... by OL Communicator in Reporting 02-17-2020 3 3	3	3
How to write cron to schedule for an alert to trigger during last day of the month? We have a requirement to extract all the admin users and give the report on last day of the month. I have the query t... by gndivya Explorer in Alerting 02-16-2020 0 2	0	2
Where does splunk log email failures It seems that Splunk is not sending the emails when the alerts are triggered. Is there any place where I can see what... by adoshi Explorer in Reporting 02-13-2020 0 8	0	8
"view results in splunk" link in alert mail is taking to results not found(404) page Hi Everyone , Link in alert mail generated by splunk is returning page not found . URL has my search head hostname ... by vasanthi77 Explorer in Alerting 02-13-2020 0 10	0	10
cutom alert action python script Hi all. I am struggling where should I check. I want to make splunk user automatically. so, I made this script. tes... by pipipipi Path Finder in Alerting 02-12-2020 0 6	0	6