| | I'm monitoring CPU usage on a Windows server. What's the best way to create a search/alert if CPU usage goes over 80... 3 1 | 3 | 1 | |
| | I set the custom time to June 14 11:48:00 -> June 14 11:48:05. I then click on search and the log info is shown but ... 0 2 | 0 | 2 | |
| | Hi there, I am in the process of planning a roll out of splunk to our network, however, I am stuck on the indexes. I... 0 6 | 0 | 6 | |
| | Is there anyway I could verify if there is any variable which could be used to extract hostname for inputs.conf? inst... 0 4 | 0 | 4 | |
| | I'm running splunk version 4.0.7 on Windows Server 2008 SP2 x86-64. It's work fine for a couple months. After environ... 1 1 | 1 | 1 | |
| | I am indexing data feeds A and B and want to forward just data from B as syslog to servers X and Y (cloning the data ... 1 3 | 1 | 3 | |
| | How do you properly set a source matching stanza in props to be lower than the default stanza matching priority? Per... 2 3 | 2 | 3 | |
| | I have a logfile that has headers in the first two lines of the file. Imagine something like the output of UNIX' "to... 0 1 | 0 | 1 | |
| | My events have two different times in them, one from when the dns server processed them, and then another is added to... 1 5 | 1 | 5 | |
| | I have a linux indexer. I forward with the light forwarder from about 200 windows boxes. On the indexer I don't wan... 0 3 | 0 | 3 | |
| | I am logged as Admin in my system and I noticed that the "Global Summary dashboard" does take into consideration all ... 2 2 | 2 | 2 | |
| | License Violations continue daily even though I have taken the daily indexing down below the Allowance. With a 500Mb ... 1 6 | 1 | 6 | |
| | i am not recieving any xml for /services/search/jobs/<sid>/events ... but i get xml for /services/search/jobs/<sid>/... 2 3 | 2 | 3 | |
| | We've got Splunk running on a Windows 2003 R2 x64 server with 8 GB of memory, and two dual-core 3.0 GHz processors. ... 1 3 | 1 | 3 | |
| | Anyone know if it's possible to deploy different apps based on the clients build or version number? I thought I had ... 1 3 | 1 | 3 | |
| | I am planning to integrate Splunk data with MARS, would the cloning option work for Non-Splunk receiver as well? Or i... 1 5 | 1 | 5 | |
| | We are trying to filter events from the Windows Event Log that are pulled using WMI. Here is the transforms.conf: [... 0 4 | 0 | 4 | |
| | I installed the splunk for cisco security app, and at first the firewall overview dashboard worked great, but after a... 0 5 | 0 | 5 | |
| | I am trying to link events from two separate sourcetypes together that have different fields available. The "corps_ap... 3 1 | 3 | 1 | |
| | I received this error in the Windows app after configuring the app and 4.1.2 upgrade. When the app loads its defaul... 3 6 | 3 | 6 | |
| | I would like to know how to automate the package to install across a few hundred servers. I can install the pkg m... 1 7 | 1 | 7 | |
| | I'm trying to set up fschange to monitor a folder on one of our servers (running Splunk v4.1.2) using the following s... 1 3 | 1 | 3 | |
| | I need to run a shell script or Linux command inside my search to obtain external Ldap information. I have a UserID ... 2 3 | 2 | 3 | |
| | How can we specify authorization at data input source level? Like I created a TCP source, but I want it to be availab... 2 1 | 2 | 1 | |
| | I’m building a report that finds the number of unique users in our activity log each day: sourcetype="accountTransac... 1 4 | 1 | 4 | |
