Other Using Splunk

Category Activity

How to graph and alert on the state of services from bluepill log data? I use bluepill to track the health of service process (like a java web service for example). Bluepill outputs line... by ben_siemon_opow New Member in Alerting 10-05-2015 0 3	0	3
How to calculate the age of an alert from an inputlookup time field? I have a input lookup file called agingalertreport. The content looks like this. \|inputlookup agingalertreport ale... by splunksurekha Path Finder in Alerting 10-04-2015 0 3	0	3
Why am I getting "Encountered an error while reading file..." using loadjob for a savedsearch? \| loadjob savedsearch="admin:app_utc_rgswin:app_utc_rgswin_TotalHostsByWeek" \| timechart span=1d latest("# of Hosts")... by vrmandadi Builder in Reporting 10-03-2015 1 11	1	11
As part of a Splunk alert, is it possible to include 100 lines from the log prior to the event that triggered the alert? I want to set up a Splunk Alert when an ERROR string is seen. As part of the Alert, I want to send 100 lines in the l... by cybrainx Explorer in Alerting 10-02-2015 2 20	2	20
How do search and trigger an alert for elevated values over a certain time frame? I would like to configure alerting for elevated values over time. For example, if avg(time_taken)>=5000 for 10 mins ... by jlim2003 New Member in Alerting 10-02-2015 0 2	0	2
Can I send an email if splunk is not running I'm running Splunk 6.2.3 and it sends alert emails as expected. Recently I had an issue where the indexer was stopped... by terryjohn Path Finder in Reporting 10-02-2015 1 11	1	11
How to configure Splunk to send alert emails from my Gmail account? Hi, I need some help to send an alert mail to my gmail account. So, I tried to make the same configuration like the ... by otman01 Communicator in Alerting 10-02-2015 1 12	1	12
Problem with sending SNMP traps to other systems I tried to set up an alert Script in Pearl sending SNMP traps to other host like here. I Changed the Host:Port to my ... by fahoerma New Member in Alerting 10-02-2015 0 4	0	4
How to format _time field in results email? Finally got the csv results sent out in emails to only include the relevant info by using the "fields - xxxx,_raw" st... by tmeader Contributor in Reporting 10-02-2015 2 4	2	4
How to deploy SMTP email config on search heads? Hello all! I am trying to get a central config for smtp email config that I will deploy to my search heads. I notic... by brent_weaver Builder in Reporting 09-30-2015 1 1	1	1
Filtering Log Results Hello everyone I hope you guys can help me with this. How can I filter the results of the following log entry examp... by seaed_ac Explorer in Reporting 09-29-2015 0 9	0	9
Link Directly to Dashboard (permalink)? We have a daily distro that we'd like to send out across the company. We would like it to include a raw CSV, some da... by atornes Path Finder in Reporting 09-29-2015 2 2	2	2
ZenDesk incident Anyone create an App/script to integrate with ZenDesk (such as open an incident via API) which they wish to share? by fman82 Explorer in Alerting 09-28-2015 1 2	1	2
Script for a scheduled report not called if there are no results My goal is to create some CloudWatch metrics from Splunk reports that run periodically. So I've created a report, sch... by artvolk Engager in Reporting 09-28-2015 0 5	0	5
Alerts: Getting Multiple Values into Alert Hi Guys, I am not sure if this has been asked before (as I couldn't find anything on this issue). I am working on a... by vinodmadaan Path Finder in Alerting 09-28-2015 0 4	0	4
Is there a way to get a report on license usage for all indexes per day over X days, regardless of how little data is indexed? Hi All, I'd like a report for license usage for all my indexes per day over X days. We have over 30 indexes and whe... by chanmic New Member in Reporting 09-28-2015 0 4	0	4
Splunk ES Datamodel Constantly Rebuilding Hi All, I have a problem that has been giving me a bit of grief with ES. Essentially my larger datamodels (Authenti... by domenico_perre Path Finder in Reporting 09-27-2015 1 2	1	2
How to create a single alert to trigger only when a threshold is passed by a single index, not all indexes combined? Hi everyone, I'm trying to write an alert, covering all indexes, that triggers when a specific number (say, 50) of ... by khagan Path Finder in Alerting 09-24-2015 0 3	0	3
Consecutive Full GC events from logs Hi, I'm trying to capture and report if in my log file I have say 5 consecutive matches for "Full GC" string. Any i... by jgfchan Engager in Reporting 09-24-2015 0 2	0	2
how can I do to create one search when I can see the severity of the alert? Hello. Can you help me? how can I do to create one search when I can see the severity of the alert? for example: ... by samir_silva New Member in Alerting 09-24-2015 0 2	0	2
exporting data into a csv file in splunk + _time format changes to `2015-09-15T00:00:00.000+1200` but want `"2015-09-15 00:00:00` exporting data into a csv file in splunk i have a search that gives me data as follows in the stats tab. _time A... by HattrickNZ Motivator in Reporting 09-23-2015 0 1	0	1
What is the cron time for every day at 9 AM What is the cron time if i want to schedule an alert which should trigger on each day at 9 AM by kumina New Member in Alerting 09-23-2015 0 3	0	3
Is it possible to get percentiles in pivots? Hi, I'm attempting to port over some searches to pivots and data models for performance reasons. One issue I'm seein... by therockhead Path Finder in Reporting 09-21-2015 1 1	1	1
How do I capture and verify the response (exit status) of this CLI savedsearch in the shell script? Hi, This is a follow up question for the same requirement in this question: https://answers.splunk.com/answers/3089... by yelkey Explorer in Reporting 09-21-2015 0 3	0	3
Is there a way to alert based on a number of events for each matching server in a search? I need to create an alert based on a number of events occurring in a particular time period for multiple servers. I k... by benjamincortega New Member in Alerting 09-18-2015 0 1	0	1