Splunk Administration

Splunk Administration
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question

Browse the Community

Category Activity
carmackd

blacklist in batch stanza

Can I use blacklist in a batch stanza? I couldn't find anything in the documentation saying otherwise. Thanks,
by carmackd Communicator in Getting Data In 05-19-2010
2 2
2
2
djfisher

How do you exclude dead machines off the Lost Forwarders search.

I use the recommended search below to find lost forwarders after a 24hr period. http://www.splunk.com/wiki/Depl...
by djfisher Explorer in Getting Data In 05-19-2010
1 5
1
5
hiddenkirby

static text above the appHeaderWrapper

IF one wanted to add static highlighted text to the top of every page in their app... how would they go about doing t...
by hiddenkirby Contributor in Security 05-19-2010
1 7
1
7
oreoshake

Too many open files on forwarders

I'm starting to get a lot of these errors on my forwarders. Any suggestions? Pushing /etc/security/limits.conf does...
by oreoshake Communicator in Getting Data In 05-19-2010
0 2
0
2
seanlon11

source files associated with a host

How can I easily search through Splunk to figure out which sources are associated with a specific host? I know I c...
by seanlon11 Path Finder in Getting Data In 05-19-2010
1 2
1
2
balbano

Splunk LF is utilizing a lot of CPU and Memory

Hi all, One of the servers we installed Splunk LF on is having high CPU and Memory Utilization as a result of Splun...
by balbano Contributor in Deployment Architecture 05-19-2010
1 6
1
6
oreoshake

Yet Another Problem Sending Events to the nullQueue

We are using "heavy" forwarders, but I have the following config on both the forwarder and the indexer but the events...
by oreoshake Communicator in Getting Data In 05-18-2010
1 4
1
4
piebob

stopping all listening ports?

reposting for a user over on the forums: I bounced my indexer and now my forwarders are unable to connect. I just u...
by piebob Motivator in Getting Data In 05-18-2010
1 2
1
2
mkinner

Can you disable an app with an app?

Using Splunk server & clients running 4.1.2. When I installed Splunk on our many clients I enabled the SplunkLightFo...
by mkinner Explorer in Deployment Architecture 05-18-2010
1 4
1
4
ostmovid

How to route to separate indexes based on host:: when forwarding to a indexer from SplunkLightForwarders

I use several SplunkLightFirwarders on Suslog-ng servers to have a "buffer" to relatively large amounts of syslog tha...
by ostmovid New Member in Deployment Architecture 05-18-2010
0 9
0
9
Get Updates on the Splunk Community!

Maximize the Value from Microsoft Defender with Splunk

<P style=" text-align: center; "><span class="lia-inline-image-display-wrapper lia-image-align-center" ...

This Week's Community Digest - Splunk Community Happenings [6.27.22]

<FONT size="5"><FONT size="5" color="#FF00FF">Get the latest news and updates from the Splunk Community ...

Reminder! Splunk Love Promo: $25 Visa Gift Card for Your Honest SOAR Review With ...

We recently launched our first <A ...
Top Karma Authors
View All