Splunk Enterprise

Community Activity

Unable to connect to license master Hi, I am getting the bellow error: editTracker failed, reason='Unable to connect to license master=https://192.168.0.... by joe06031990 Communicator in Splunk Enterprise 07-15-2021 0 3	0	3
Find failed job reason I want to see any failed job, ad-hoc and scheduled. For instance, I was creating a new search command, and it failed ... by tmontney Builder in Splunk Enterprise 07-15-2021 0 2	0	2
Splunk Search Syntax to show service & dstport Hi,I'm running the below syntax on Splunk Enterprise to get traffic logs from Fortigate firewalls:index="fortinet" "d... by Naz_Lightening Engager in Splunk Enterprise 07-15-2021 0 3	0	3
Perpetual license and Term license in one environment Hello Splunk Commnity!I have a customer that have two different Splunk Licenses: Perpetual and Term License in separa... by leefernan Explorer in Splunk Enterprise 07-15-2021 0 3	0	3
lookups Hi,Under lookups we have lookups as belowlookupsabcd.csvxyz.csvI could see configs in props.conf to map to these look... by VijaySrrie Builder in Splunk Enterprise 07-14-2021 0 3	0	3
Hide search query in drilldown Hello,when user clicks on panel for drill-down, it shows relevant record in new window. I am looking to hide the sear... by praphulla1 Path Finder in Splunk Enterprise 07-14-2021 0 8	0	8
Group Different Sources in One Query Hello, I'm running Splunk 8.1.2 and I'm trying to group different sources of an Index to count them within one query.... by a0491455 Observer in Splunk Enterprise 07-14-2021 0 3	0	3
Is it possible to learn about Splunk / ES major events when I & co-workers are offline? We have 8-5 hours daily. How is it possible to learn about the major events that happened over night when we are off ... by SamHTexas Builder in Splunk Enterprise 07-14-2021 0 1	0	1
Microsoft Azure Add-on for Splunk keeps stopping/delaying I am just wondering if others are running into this same issues. I find that some of my sourcetypes mysteriously just... by _joe Contributor in Splunk Enterprise 07-13-2021 0 0	0	0
Is it possible to Backup / Restore Splunk / ES critical .conf files for DR using the GUI / Web interface? Is it possible to Backup / Restore Splunk / ES critical .conf files for DR using the GUI / Web interface? by SamHTexas Builder in Splunk Enterprise 07-13-2021 0 1	0	1
Splunk cannot authenticate the request. CSRF validation failed. i tray to install splunk light new version and it looks good the installation, but when i tray to sing and change the... by tomasnelson Explorer in Splunk Enterprise 07-13-2021 1 7	1	7
Re: peering the index master to search head Hi All,may I know how many index master we can add to the search head . We currently have 6 and trying to add 7th ? I... by rahulreddy552 New Member in Splunk Enterprise 07-12-2021 0 2	0	2
How do I upgrade the Built-in Apps or add-ons for Splunk Enterprise? Where are the new ones found please? I have located & listed the Built-in Apps & Add-ons. Where do I find the new version of the Apps & Add-ons that come ... by SamHTexas Builder in Splunk Enterprise 07-12-2021 0 3	0	3
Migration of Enterprise Security to other SHC Hello,I have SH cluster and I have Enterprise Security (ES). I would like migrate Enterprise Security to second SH c... by Slawio New Member in Splunk Enterprise 07-12-2021 0 0	0	0
Splunk Installation on local system Hi, I have a Splunk Enterprise(8.1.0) account setup through my company. I am able to login to it online. But how do ... by archanas Explorer in Splunk Enterprise 07-09-2021 0 3	0	3
Help me with Time formt and time prefix I need help to write time format and time prefix for below timelogs. Please note these are seperate logs, hence need... by shreya17 Explorer in Splunk Enterprise 07-09-2021 0 3	0	3
Dynamic dashboard drop-down Hi Splunkers,Long time listener, first time caller. I am trying to figure out how to make a dashboard based on a mont... by asparaguscookie Loves-to-Learn Lots in Splunk Enterprise 07-09-2021 0 0	0	0
How can I load external JavaScript files? How can I load extern js scripts in Splunk 6.6.3 I try to follow the music dashboard tutorial. http://dev.splunk.com... by manuel2202 Explorer in Splunk Enterprise 07-08-2021 0 5	0	5
index= source_type= cf_app_name=*** api_call="" index=* source_type= cf_app_name=** api_call="*" \| where like (api_call, "%xyz%")\| table _time,response_code, du... by Scorpion New Member in Splunk Enterprise 07-08-2021 0 1	0	1
Configure indexer cluster to send one index to splunk(standalone, not in architecture) Hi, i have a problem with sending one index from indexer cluster to another standalone Splunk instance. I have a 4 i... by Dias Explorer in Splunk Enterprise 07-08-2021 0 1	0	1
Cannot save custom field extraction when using my own regex Hey, I'm attempting to extract a field by using: (?<=cs4=)(.*\n?)(?=categoryTechnique) It matches 100% of the result... by Julznova_ New Member in Splunk Enterprise 07-08-2021 0 1	0	1
\| rest /services/data/indexes only return event indexes Hi all,can anyone confirm the behaviour?when running:\| rest /services/data/indexes \| table title datatype I'm only ... by schose Builder in Splunk Enterprise 07-07-2021 0 4	0	4
2 seperate indexer cluster with different splunk version Hello,We are planning to upgrade our splunk to version 8.1.4. We have 2 separate indexer cluster for 2 different clie... by maginoo_99 Engager in Splunk Enterprise 07-07-2021 0 1	0	1
Sending reports from On Call to Enterprise Hello, I would like to know if it is possible to send the reports generated in Splunk On Call (like the Response Metr... by ookamidono Explorer in Splunk Enterprise 07-07-2021 0 0	0	0
Duplicate events Hi Team,Getting Duplicate events during Index timeLog ingestion method - UFWhat would be done to stop duplicate event... by VijaySrrie Builder in Splunk Enterprise 07-06-2021 0 3	0	3