Splunk Enterprise

Community Activity

realtime parse data from one index to another index Thanks first for your checking ! the case is :we have one index named : indexA with the realtime data come from appli... by HEYan123 New Member in Splunk Enterprise 06-16-2021 0 0	0	0
Replication Factor for different buckets There isn't a way to set RF for different buckets, right? e.g. hot RF 2, cold no RFWe're using smartstore, therefor S... by wgawhh5hbnht Communicator in Splunk Enterprise 06-16-2021 0 2	0	2
Are there any equivalent commands similar to ping, that can be used to check if the server is up or down? Hi, Are there any equivalent commands similar to ping, that can be used to check if the server is up or down? by Ashwini008 Builder in Splunk Enterprise 06-15-2021 0 2	0	2
Splunk Forwarder - Indexer URL's Good afternoon,I am sure this has been asked many times, but I am just trying to refine what I am looking for. We cu... by mweb New Member in Splunk Enterprise 06-15-2021 0 0	0	0
splunk db connect app version 3.4.2 issue with whitspace in query when using splunk db connect app version 3.4.2,we are getting result only if when running the query without space(sp... by Ashwini008 Builder in Splunk Enterprise 06-15-2021 0 0	0	0
Will the license be consumed/used if we copy the Hot DB data from one of the indexer to another indexer hi ,we are trying to copy the the hot db data of one of the indexer (path>splunkhome/var/lib/splunk) to other indexer... by Ashwini008 Builder in Splunk Enterprise 06-15-2021 0 0	0	0
Splunk API: Insert savedsearches (entire file) via API As part of automation, we needed to insert entire "SavedSearches" file via API. We have done manually/successfully... by koshyk Super Champion in Splunk Enterprise 06-12-2021 0 0	0	0
Splunk db connect Oracle Wallet I am trying to generate a new input for an oracle database that contains the Wallet functionality. I followed the ste... by Spike91 Loves-to-Learn in Splunk Enterprise 06-11-2021 0 0	0	0
Combine rex field how do i combine both these rex field into one and display the count?index=abc"exception":"CommonApplicationException... by DougiieDee Explorer in Splunk Enterprise 06-11-2021 0 4	0	4
Splunk free version Good afternoon! Only recently started using Splunk. I am using the Enterprise trial version and the license will end ... by Losopa Engager in Splunk Enterprise 06-11-2021 0 1	0	1
Splunk download: Any locations to get the installer id vs release number? As part of Splunk automation, we are looking to see if we can download Splunk automatically into the servers direct... by koshyk Super Champion in Splunk Enterprise 06-11-2021 0 3	0	3
useack in distributed environment 2 sets of heavy forwaders Hi Splunk Support! We currently have a large Distributed Envirionment where we have 3 sets of Heavy forwarders which ... by craigwilkinson Path Finder in Splunk Enterprise 06-10-2021 0 2	0	2
HTTP EVENT Collector - HttpAppender - how to add hostname Dear All I am new to Splunk, and we are using log4j2 configuration file with HttpAppender to send logs , but I am not... by dsvasani New Member in Splunk Enterprise 06-10-2021 0 1	0	1
Splunk rex field How do i extract this message in splunk rex field to display error code and message in reports like ABC_Code and Mess... by DougiieDee Explorer in Splunk Enterprise 06-10-2021 0 24	0	24
Data is not rolling out from warm to Cold bucket Hi All, I have created one index in test environment as like below. [indexname]homePath = $SPLUNK_DB/f5/dbcoldPath = ... by kartm2020 Communicator in Splunk Enterprise 06-10-2021 0 0	0	0
Is there any way to Disable Views in splunk instead of deletion Is there any way to Disable Views in splunk instead of deletion? Splunk version 7.3.5 by BKR Loves-to-Learn Lots in Splunk Enterprise 06-09-2021 0 2	0	2
Would you show steps on how to check / fix file integrity check errors on Splunk Ent. / ES How to check / fix file integrity check errors on Splunk Ent. / ES. Thank u by SamHTexas Builder in Splunk Enterprise 06-09-2021 0 3	0	3
I want to look for certain text and extract that field and make a report index=abc "exception":"java.util.concurrent.ExecutionException" searching above displays like these in below events "... by mikeyty07 Communicator in Splunk Enterprise 06-09-2021 0 2	0	2
Do we need to backup $SPLUNK_HOME/var/run/searchpeers on the indexers? Due to the volume of the data in $SPLUNK_HOME/var/run/searchpeers on the indexers, our SAs would like to know if this... by danielbb Motivator in Splunk Enterprise 06-09-2021 0 0	0	0
DAG Execution Exception: Search has been cancelled DAG Execution Exception: Search has been cancelled by Darkmattersalmi New Member in Splunk Enterprise 06-09-2021 0 1	0	1
Splunk Clustered Indexer data erasing We have three indexers in our cluster.We want to decommission one of the indexers but still want to search all the da... by smithke Explorer in Splunk Enterprise 06-09-2021 1 3	1	3
Bar Chart Alert Hi all!I would like to set an alert on a bar chart. The bar chart shows the number of service desk tickets per each d... by michaelsplunk1 Path Finder in Splunk Enterprise 06-09-2021 0 1	0	1
New Splunk 8.1.1 feature - Enhanced TSIDX compression is related to tsidxWritingLevel ? Hi,I have seen this new feature in Splunk 8.1.1https://docs.splunk.com/Documentation/Splunk/8.1.1/ReleaseNotes/MeetSp... by edoardo_vicendo Builder in Splunk Enterprise 06-08-2021 0 4	0	4
Add dummy row with 0 when count returns 0 HiI need to display 0 in the field "Number of index" if there is no host in this indexI tried but I have no resultsC... by jip31 Motivator in Splunk Enterprise 06-08-2021 0 6	0	6
How to check Up/Down hosts with Splunk and/or the Telegraf Agent? We are trying to verify if a server is up or down via different ways, but none seem to be working for us.We are monit... by Mark90 Explorer in Splunk Enterprise 06-07-2021 2 0	2	0