Other Using Splunk

Category Activity

Splunk in really BIG environment Hi all, I was told to evaluate Splunk to run in a really BIG company. We are talking about a big amount of log files... by Katsche Path Finder in Alerting 09-09-2011 0 3	0	3
clone saved search, 400 times i have a nice long saved search: savedsearch A index="disk" fs="/path/of/filesystem"\|stats .......... i want 400 or... by joshrabinowitz Path Finder in Reporting 08-30-2011 0 3	0	3
Generating a report of all "Searches and Reports" I have a lot of scheduled searches/alerts setup in Splunk. Every month, I need to export a list of all alerts and th... by hhopkins Engager in Reporting 08-29-2011 1 1	1	1
Deployment Monitor - Report issue I'm seeing an issue with one of the Deployment Monitor reports, under Home> All Indexers. At the bottom of this page... by mikelanghorst Motivator in Reporting 08-26-2011 1 2	1	2
Can I tag time as scheduled maintenance to exclude events from searches? I would like to tag various time periods as "scheduled maintenance," so that my application error searches ignore eve... by jkeglovitz Explorer in Reporting 08-26-2011 3 1	3	1
Alerting per device Hello, I have about 80 devices logging to Splunk and am in the process of trying to setup alerting for them. I would... by corwinz6 Explorer in Alerting 08-22-2011 2 1	2	1
UDP Events truncated at 2048 bytes Hello, Splunkmind - I'm having an issue with a UDP data inputs. All of my events are being cutoff after 2048 bytes... by blurblebot Communicator in Alerting 08-22-2011 0 6	0	6
How can I get Splunk to accept "internal" email addresses for scheduled reports? We have a large number of internal email addresses that use our internal domain - eg. address@domain.foo.local. These... by Glenn Builder in Reporting 08-12-2011 0 1	0	1
Splunk 4.2.2 - Logs off by several Hours Good Morning, We recently upgraded our Splunk Instance to version 4.2.2, today we noticed that several of our logs a... by A4orce84 New Member in Reporting 08-11-2011 0 3	0	3
PDF App is generating an libfontconfig error and not receiving PDF. 2011-08-09 10:28:03,029 ERROR pdfhandler:529 - FF STDERR: /opt/splunk/etc/apps/pdfserver/bin/firefox-i386/firefox-b... by rsimmons Splunk Employee in Reporting 08-09-2011 1 1	1	1
Alert based on comparison of two result rows Hi Folks, I am running a search query and I always have two sets of results. Description Rate Transac... by splunkrags Engager in Alerting 08-04-2011 1 2	1	2
email alert stopped working My alert stopped emailing me today. It was fine previously. Looks like the alert didn't even noticed about the event.... by jng New Member in Alerting 08-03-2011 0 3	0	3
Get value out of df scripted input for reporting I am working on creating a daily historic report to track the utilization of space on my Splunk file systems. I have... by cpenkert Path Finder in Reporting 08-02-2011 0 4	0	4
How do I send an sms alert I am trying to find a way to send an SMS to a certain phone number whenever an alert is triggered. What would be the... by beaumaris Communicator in Alerting 07-29-2011 1 2	1	2
Log inactivity Hi Is there a way to send an alert if there is no logs coming for more than 10min for a source type. Regards, Hari... by harishd Explorer in Alerting 07-25-2011 1 1	1	1
Results file does not exist even though results count is non zero I have a save search that runs at 5 minute intervals and passes it's results to a perl script for additional processi... by mlf Path Finder in Reporting 07-21-2011 0 1	0	1
Unable to Export Events from Cmd line I am attempting to move data from one index to another. I've read that the way to do this is to export the events yo... by richnavis Contributor in Reporting 07-21-2011 0 2	0	2
Custom Fields in Raw Results of Scheduled Search We recently upgraded our Splunk app from 3.4.14 to 4.2.1. I have a custom script called from a scheduled search whic... by mpetteys New Member in Alerting 07-20-2011 0 1	0	1
Using Splunk for logging shopping data and generating reports Hi, We have an application return in Java that captures shopping metrics like Customer Name, Vendor, CustomerId and ... by getsplunk Engager in Reporting 07-18-2011 1 1	1	1
Cannot find user ID with id=-1 I am documenting an upgrade and get the following error messages for my saved searches: could not find user in splun... by wwhitener Communicator in Reporting 07-18-2011 0 1	0	1
User departure causes summary indexes to not schedule I have a dashboard that depends on multiple summary indexes, all of which have global permissions. The summary index... by crhyne Engager in Reporting 07-15-2011 1 1	1	1
call a savedsearch calling a macro from the CLI I have a problem with that : a macro that fills a new field [mymacro] definition = eval now_time=now() \| convert ct... by mataharry Communicator in Reporting 07-15-2011 1 3	1	3
AuthorizationFailed: [HTTP 403] when clicking on the link in an alert email We are using scheduled saved searches with email links in them as a monitoring tool. The problem is that the majorit... by fredbsplunk Explorer in Alerting 07-15-2011 2 6	2	6
Prevent repeat alerts Hi. We have script that Splunk runs every 15 minutes. The script checks to see if a partition is using the primary or... by Branden Builder in Alerting 07-14-2011 3 5	3	5
Resolve IP Addresses Within Report Results? For example, within a simple firewall search report, I am looking for destination IP addresses coming from a certain ... by aferone Builder in Reporting 07-12-2011 3 2	3	2