Splunk Administration

Splunk Administration
Category Activity
cmccoy
How do you configure Splunk to monitor files within a VM? I installed Splunk within a VM and added a data input to m...
by cmccoy Engager in Getting Data In 04-17-2010
1 3
1
3
rsimmons
Just completed an upgrade and we are getting the error message - "There is no query runner registered" "Internal Serv...
by rsimmons Splunk Employee Splunk Employee in Deployment Architecture 04-17-2010
2 4
2
4
Chris_R_
Odd behaviour with some udp syslog input from a Panorama device (palo alto management device) and ArcSight connector ...
by Chris_R_ Splunk Employee Splunk Employee in Getting Data In 04-17-2010
0 5
0
5
dskillman
Log entries have timestamps with Taiwan years. Taiwan year = current year-1911, so this year is 99. By default Splu...
by dskillman Splunk Employee Splunk Employee in Getting Data In 04-17-2010
2 3
2
3
Rikakiah
I'm a fairly new admin and extremely new at looking at reports/data. I have an issue with my server that I can't tra...
by Rikakiah New Member in Getting Data In 04-17-2010
0 5
0
5
Jaci
Is there a way to export the data that isn't correct then re-import it using the correct sourcetype? If not, is there...
by Jaci Splunk Employee Splunk Employee in Getting Data In 04-16-2010
3 2
3
2
mzorzi
The disk space use on our search head is going up significantly. I would seem that *.bundle files in $SPLUNK_HOME/var...
by mzorzi Splunk Employee Splunk Employee in Deployment Architecture 04-16-2010
3 4
3
4
Joels
Is there a search I can execute that will show me all the passwords that have been sent across the network in clearte...
by Joels New Member in Getting Data In 04-15-2010
0 1
0
1
Josh
How do I setup multiline log files in splunk, specifically we have a set of logs which are irregular, Log entries do ...
by Josh Path Finder in Getting Data In 04-15-2010
3 6
3
6
sdwilkerson
Is there a reason why the bundled radiudScripted.py script to auth to radius calls "radclient" instead of leveraging ...
by sdwilkerson Contributor in Security 04-15-2010
2 4
2
4
splunkbox
After upgrading from 4.0.x (I don't exactly remember the version) to 4.1 in OS X 10.5.8 I get the following log /Ap...
by splunkbox Engager in Installation 04-14-2010
2 3
2
3
lguinn2
Do I need to configure distributed search on all the search peers?
by Legend in Deployment Architecture 04-14-2010
1 2
1
2
kbecker
Is Splunk 4.1 (indexer & search) still compatible with 3.4.11 forwarders? Is so are there any features in 4.1 that w...
by kbecker Communicator in Installation 04-14-2010
2 3
2
3
Simeon
I have a file that I need to index twice. Specifically, I need it sent/indexed to two different indexes. How could...
by Simeon Splunk Employee Splunk Employee in Getting Data In 04-14-2010
1 4
1
4
Jeremiah
How should I allocate space for indexes among indexing nodes? For example, lets say I have 2 groups of servers that ...
by Jeremiah Motivator in Deployment Architecture 04-14-2010
1 1
1
1
cdavidy
I've been asked to look into renaming my Splunk indexer server (don't ask why). Is there a "best" or safe method for...
by cdavidy Explorer in Deployment Architecture 04-14-2010
1 2
1
2
despera
I have Splunk 4.0.10 64bit version running in Windows 2008 R2 64bit. I noticed that when Splunkd service is turned o...
by despera Splunk Employee Splunk Employee in Getting Data In 04-13-2010
2 1
2
1
Dan
I've heard there are some REST endpoints that allow you to refresh objects (such as new dashboards, nav menus, etc......
by Dan Splunk Employee Splunk Employee in Getting Data In 04-13-2010
2 3
2
3
pillowhead
Hi, I just installed cisco_firewall_addon for version 4.1 of splunk and I am having some issues. I have an ASA and a ...
by pillowhead Explorer in Getting Data In 04-13-2010
1 5
1
5
norfleetj
Hello, System type: Linux We have splunk running on our centralized syslog-ng server. We then have other servers fo...
by norfleetj Engager in Getting Data In 04-13-2010
1 4
1
4
hulahoop
Would someone confirm the following observations regarding data input configuration via inputs.conf? when using wild...
by hulahoop Splunk Employee Splunk Employee in Getting Data In 04-13-2010
0 3
0
3
mudricd
Hi, I have syslog_ng server (sles 10). Everything is logged in this way: /var/log/HOSTS/xx-yy/hostname or ip/log fi...
by mudricd Explorer in Getting Data In 04-13-2010
0 2
0
2
jrich523
I just installed Splunk 4.1 (configured to run on system accounts) and the first thing i did was add an input monitor...
by jrich523 Path Finder in Getting Data In 04-12-2010
1 1
1
1
matt
I need to figure out what LDAP values I should be using to make auth work.
by matt Splunk Employee Splunk Employee in Security 04-12-2010
1 3
1
3
Lowell
Does anyone know if alwaysOpenFile still works in inputs.conf as of Splunk 4.1. It still shows up in the 4.1 docs, b...
by Lowell Super Champion in Getting Data In 04-12-2010
1 6
1
6
Splunk Learning

Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.

Get Started

Announcements
Register for Upcoming Live Tech Talks! Security, Observability, Platform and App Developer Editions are held every month.

How digitally resilient are you? Take a quick Digital Resilience Assessment to find out if you're prepared for disruption!
Get Updates on the Splunk Community!

Introducing ITSI 5.0: Unified Visibility and Actionable Insights

Introducing ITSI 5.0: Unified Visibility and Actionable Insights Tuesday, July 21, 2026  |  10:00AM PT / ...

Inside Splunk Agent Observability: Understanding Agent Behavior, Tokens & Costs

Inside Splunk Agent Observability:Understanding Agent Behavior, Tokens & Costs Thursday, August 06, ...

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...
Top Karma Authors