Splunk Enterprise

Community Activity

Installing Splunk 8.1.0 - Ubuntu 20.4 warning message Hi,Installing Enterprise 8.1.0 on Ubuntu 20.4 when unpacking get the following message.cp: cannot stat '/opt/splunk/e... by duncandka Engager in Splunk Enterprise 05-12-2021 1 6	1	6
Time Picker issue with Save Report Reference Hi, I have a complicated dashboard that is based off of scheduled saved report. All menus and panels are fed off of o... by mbasharat Builder in Splunk Enterprise 05-12-2021 0 4	0	4
Rex field extraction Hello,I have a simple extraction I need to make on a new dataset that has not yet had the fields defined for me.I wan... by user93 Communicator in Splunk Enterprise 05-12-2021 0 1	0	1
How to increase license daily indexing? Hello,I have used the trial and cloud demo version of Splunk and I would like some information about the licensing. I... by YoanL New Member in Splunk Enterprise 05-12-2021 0 1	0	1
Phantom rest authentication Hello,Is there a possible way to authenticate to Phantom API but withoutsending ph-auth-token header. The documentati... by amoulkaf Engager in Splunk Enterprise 05-12-2021 0 0	0	0
How to add search peer to monitoring console thru Rest call from search peer Hi,We have setup distributed splunk 8.1.3 cluster deployment in AWS. We have configured monitoring console as a separ... by vtalanki Path Finder in Splunk Enterprise 05-11-2021 0 0	0	0
Compare values between yesterday and today Hi All,I am a newbie in Splunk world and looking for some help in structuring my query.I have an index with data like... by imheejin Explorer in Splunk Enterprise 05-11-2021 0 3	0	3
How to index different files with the same content I have a folder with file generated once a day I would like to index all files event the files have the some content ... by rayar Contributor in Splunk Enterprise 05-11-2021 0 1	0	1
How to recreate cpu memory usage searches? Because we are unable to use the monitoring console in Splunk Mobile, I would like to create our own monitoring conso... by TheBravoSierra Path Finder in Splunk Enterprise 05-11-2021 0 5	0	5
Detecting alteration in SQL DB by splunk Hi,I want to know how I can detect if someone alter data in my databases in SQL Server. Also can I do it with DB Con... by sh_tavousi Explorer in Splunk Enterprise 05-10-2021 0 0	0	0
Search Factor and Replication factory not met. Frozen=1 I have started seeing this message often on my Indexer Cluster Master, when I view the Bucket Status page. bid=_inter... by jfaldmomacu Path Finder in Splunk Enterprise 05-10-2021 0 2	0	2
Trying to create a line break on source type in the UI for xml import An example of the file is below. I want to break on <Object> and I tried (\<Object>\) and (\<Object\s) with no succes... by jlarousse Explorer in Splunk Enterprise 05-10-2021 0 8	0	8
App DB Connect - DB Input gets disabled after connection failures although auto_disable = false HiThe database connection gets disabled after some connection failures - done for normal periodic db maintenance - al... by altink Builder in Splunk Enterprise 05-10-2021 0 0	0	0
Create Notables based on Number of Matched Events Hello, it is possible to generate notables only based on number of matched events? Example, if the correlation search... by whitefang1726 Path Finder in Splunk Enterprise 05-10-2021 0 0	0	0
Create Notable Event/s Only Based on Number of Events Hello, is it possible to create notables only based on the number of events triggered?Example: If the correlation sea... by dmvfsaligbon Loves-to-Learn in Splunk Enterprise 05-10-2021 0 0	0	0
TailReader - Could not send data to output queue (parsingQueue), retrying.. Hi guys,I am seeing this error on one of my HWF, any clues to fix the issue? 09-05-2021 14:11:21.437 +1000 WARN TailR... by Knightrider1234 Explorer in Splunk Enterprise 05-10-2021 0 1	0	1
SSO intergration issue - Splunk to use the userid returned by idP to do validation of roles mapped to LDAP (MS AD) How can Splunk use the userid returned by idP to do validation of roles based on group mapped to LDAP (Microsoft Acti... by granz12 New Member in Splunk Enterprise 05-09-2021 0 0	0	0
Load Balancing in UF doesn`t work Hi,I have 2 indexers and I have set them in outputs.conf but my logs are indexed in one of them. I guess load balanci... by sh_tavousi Explorer in Splunk Enterprise 05-09-2021 0 3	0	3
Splunk Search only works if Sourcetype is specified So I have this very strange problem. We have 2 SearchHead environments. 1 SearchHead Cluster(7) and a Standalone Dev ... by amtoyo Loves-to-Learn in Splunk Enterprise 05-07-2021 0 4	0	4
Are there any automated scripts to back up the kvstore on each Splunk server as part of a basic back? Daily or weekly? Are there any automated scripts to back up the kvstore on each Splunk server as part of a basic back? How often shoul... by SamHTexas Builder in Splunk Enterprise 05-07-2021 0 7	0	7
how Splunk license is consumed? what components or product or apps or other x things that consume the license? Greetings all!!Hope this finds you well.- Kindly help me to understand how in distributed environment , how Splunk l... by pacifikn Communicator in Splunk Enterprise 05-07-2021 0 4	0	4
enable integrity control on splunk 6.3 Hi, we recently migrated to 6.3. However in this version we cannot use anymore the eventhashing stanza in audit.conf.... by arber Communicator in Splunk Enterprise 05-06-2021 2 7	2	7
English (GB) locale instead of English (US) for non-English browsers I'm not sure where to address the problem, but let't try here:The documentation says that Splunk sets locale basing o... by alekwisnia Explorer in Splunk Enterprise 05-06-2021 0 4	0	4
Alert Action to call a Rest API Hello,We want to call a REST API endpoint as the action for an alert and also wish to send some parts of the search r... by jg91 Path Finder in Splunk Enterprise 05-06-2021 0 0	0	0
Permissions issue in Docker container When splunk starts it seems to try and chown the config files (ie. web.conf) to whatever user splunk is currently run... by thoyt Engager in Splunk Enterprise 05-06-2021 1 2	1	2