| | Hello all, Not sure if anyone has encountered this before, but I have events that are purged off but when I am in th... 0 3 | 0 | 3 | |
| | Hello guys, Been trying to get this to work but to no avail... I have a CSV file that goes like this: pid hostname... 0 3 | 0 | 3 | |
| | Splunk is currently indexing the logs for all of my companies switches and routers. It's a mishmash of Dell and Cisco... 0 2 | 0 | 2 | |
| | Hi all, is there a way to translate this event into a table? This is what I get with my search string: index="vmware... 0 5 | 0 | 5 | |
| | Hi. Seems like a lot of people have a question similar to this, but maybe I am missing something simple. I'm monit... 1 6 | 1 | 6 | |
| | Looks like MetaData:Source should be used, but despite many variations and | extract reload=t, I can't seem to get th... 0 4 | 0 | 4 | |
| | Is there a way to specify an alternate location for a Splunk forwarder to do its Splunk crash dumps? 0 5 | 0 | 5 | |
| | We run a central Syslog-NG server, which all the logs for the servers and devices we care about get sent to. We use ... 3 4 | 3 | 4 | |
| | I have a folder containing logs as below. I want to exclude all directories not named DONTINDEX_* and index the conte... 3 6 | 3 | 6 | |
| | I need help figuring out how to store visitor session info into a summary index. First, what I want to be able to do... 1 1 | 1 | 1 | |
| | I've noticed that the maxDist value in the props.conf on various lightweight forwarders varies. I've never explicit... 1 1 | 1 | 1 | |
| | You can you backfill to fill in missing pieces, but what happens when splunk or syslog run behind and events run part... 2 1 | 2 | 1 | |
| | I am trying to configure a GET workflow action that decodes a session Id. The problem is that you have to pass the c... 0 1 | 0 | 1 | |
| | Can the Cisco Firewall addon be restricted to only analyze data from a specific source or sourcetype? I have reports... 0 2 | 0 | 2 | |
| | What is the significance of cumulative_hits below? Search match hits? number of events returned from a search? 07-09... 1 3 | 1 | 3 | |
| | Hello, i seem to have a basic missunderstanding how the Splunk 4.1.3 Deployment Server works. I want to deploy a simp... 2 13 | 2 | 13 | |
| | We've been having severe Splunk performance issues on the following system: Windows 2008 R2 Enterprise 64 with a 2 C... 0 3 | 0 | 3 | |
| | I would like to install IIS on a Splunk Indexer. Is there any way that this would cause any issues? 1 1 | 1 | 1 | |
| | Lets say I have this simple serverClasses: [global] whitelist.0 = * [serverClass:Windows] machineTypes = windows-in... 2 7 | 2 | 7 | |
| | Can I set up a role to access the jobs, but not give them the ability to administer all objects on the system? It see... 0 1 | 0 | 1 | |
| | I'm trying to monitor the xml files that define a Solaris service. These files live under /var/svc/manifest/.../*.xml... 1 5 | 1 | 5 | |
| | I tried "splunk train sourcetype filename sourcename" and received the same error. Then I found this answer and got... 1 2 | 1 | 2 | |
| | Hello All I have Splunk 4.1.4 (splunk-4.1.4-82143-Linux-i686.tgz) installed (on Linux i686 box). I'm currently f... 2 6 | 2 | 6 | |
| | Does Splunk have the ability to use different sets of credentials for different monitoring on Windows? It appears o... 0 1 | 0 | 1 | |
| | We recently started turning on 'autoLB' for our lightweight forwarders. We use the default value of 30 seconds for t... 0 4 | 0 | 4 | |
