Splunk Answers

Splunk Answers
Ask questions. Get answers. Find technical product solutions from passionate members of the Splunk community.

Browse the Community

Category Activity
woodchuck
hello everyone, I know there are many similar posts to this, and i have read a lot but i cant seem to get it to work...
by woodchuck New Member in Getting Data In 08-09-2010
0 2
0
2
whywhywhy
I have a search that is looking pipes through a rex. rex fields=_raw "\D(?<big_num>\d{15,16})\D" I want the UI to ...
by whywhywhy Engager in Splunk Search 08-09-2010
1 2
1
2
ericjan
I have the following log structure. Splunk is configured to monitor /var/logs directory, and the host is defined by p...
by ericjan New Member in Getting Data In 08-09-2010
0 2
0
2
Saltie06
Is there a way to deserialize the LoggingEvent produced by Log4J when using the socket appender? Splunk appears to re...
by Saltie06 New Member in Getting Data In 08-09-2010
0 3
0
3
roguerr
Crash results in corrupt metadata preventing Splunk from starting up again. Look for following line before crash in s...
by roguerr Engager in Monitoring Splunk 08-09-2010
1 2
1
2
nate1
I had a power outage on my system and upon restoring, I now get this in the splunkd.log and the splunkd service will ...
by nate1 Explorer in Installation 08-09-2010
0 5
0
5
heterodyned
Hello Folks, I have two copies of inputs.conf, one is under the etc/apps/local directory ( created the local and pla...
by heterodyned Path Finder in Getting Data In 08-09-2010
0 2
0
2
vcarbona
Here's my CLI search: SPLUNK_URI=https://splunk_search_head:8089 /opt/splunk/bin/splunk search '|savedsearch "mysav...
by vcarbona Path Finder in Splunk Search 08-08-2010
2 4
2
4
serialmonkey
I get lots of data from various systems via syslog. One of my systems sends me data that looks like this HEADERTEXT:...
by serialmonkey Path Finder in Splunk Search 08-07-2010
1 5
1
5
sranga
Hi We have a few charts that display summary-indexed data. The charts take a couple of form inputs including _time...
by sranga Path Finder in Splunk Search 08-06-2010
0 7
0
7