Splunk Enterprise

Community Activity

Upgrading Solaris 10 Forwarder to 6.6.11 I have splunk installed on my Solaris 10 server. I need to upgrade to 6.6.11 version. Can I just install over older... by surfshooterhi New Member in Splunk Enterprise 01-31-2019 0 5	0	5
Data Not Getting Extracted Correctly as per CSV We got an requirement to ingest a CSV file from a client machine. And in that CSV file we have headers in place as we... by anandhalagarasa Path Finder in Splunk Enterprise 01-31-2019 0 3	0	3
why does some of the fields in the SH starts with # why does some of the fields in the SH starts with # , and others not . by rajneeshdba Explorer in Splunk Enterprise 01-24-2019 0 2	0	2
How to enable sending linux command logging to Splunk? Hi All, How do we get to log all the commands run in the shell for an oracle linux OS. Right now, we are monitoring ... by dharshini Explorer in Splunk Enterprise 01-23-2019 0 3	0	3
Splunk Universal Forwarder - selection of types of data to be transmitted Hi, All, I r baboon. I try to configure Universal Forwarder, but it seems that somewhere i'm doing wrong. First of... by bogdan_nicolesc Communicator in Splunk Enterprise 01-22-2019 0 3	0	3
Why am I getting these socket errors? HttpListener - Socket error from while accessing /services/streams/search: Broken pipe? Here's my ulimit info ulim... by tkwaller_2 Communicator in Splunk Enterprise 01-22-2019 0 2	0	2
F5 configguration -Only when i restart the splunk heavy forwarder i am getting the F5 udp data F5 configguration -Only when i restart the splunk heavy forwarder i am getting the F5 udp data by Nadhiyaa Path Finder in Splunk Enterprise 01-22-2019 0 1	0	1
Unable to send email using 'sendemail' command I'm trying to use the Splunk CLI to send out an email using the following search: /opt/splunk/bin/splunk search "hos... by jaredloo New Member in Splunk Enterprise 01-21-2019 0 1	0	1
Unable to add stand alone search head to Indexer Cluster I want to create a new search apart from the existing searchhead cluster. I have added the following configuration i... by sesharao92 Explorer in Splunk Enterprise 01-21-2019 0 13	0	13
Can we integrate a Splunk Instance with another Splunk Instance through REST API Modular Input? I was trying to send the data from one Splunk instance to another Splunk Instance using REST API Modular Input but th... by payal4296 Explorer in Splunk Enterprise 01-18-2019 0 2	0	2
Splunk Universal Forwarder suddenly stop receiving WinHostMon event Running Window Splunk v652 We find that from time to time, the UF suddenly stop sending the WinHostMon events to Spl... by tlam_splunk Splunk Employee in Splunk Enterprise 01-17-2019 0 1	0	1
Verification of SAML assertion using the IDP's certificate provided failed Find that the portal SSO is not working. It returns the error of the verification of the signature in the certificate... by tlam_splunk Splunk Employee in Splunk Enterprise 01-17-2019 0 1	0	1
Hardware specs for Indexer cluster Master Node and other roles it can be combined with 2 Indexers - 12GB ram and 12 vCPU 2 Search Heads - 12GB ram and 12 vCPU 1 Heavy Forwarder/ D.S - 12GB ram and 12 vCPU... by damode Motivator in Splunk Enterprise 01-16-2019 0 2	0	2
General AV Exclusions on Windows Servers with Splunk Hello all, I was hoping that someone might know where I can find the AV scan exclusions I would need to have AV on t... by MSTM New Member in Splunk Enterprise 01-14-2019 0 3	0	3
Using a Proxy server I have a Splunk server in a Windows domain that needs to pass a Bluecoat proxy that is in another network to go to th... by bejvn New Member in Splunk Enterprise 01-14-2019 0 0	0	0
How to migrate roles from a standard alone Splunk instance to a Splunk Search Head Cluster I am migrating from a stand-alone Splunk machine to a search head cluster + indexer cluster architecture. I read man... by patng_nw Communicator in Splunk Enterprise 01-14-2019 0 2	0	2
What is the process to downgrade Splunk_TA_windows from 5.x to 4.x Before we looked at the long term usage, we installed the Splunk_TA_windows from 5.01. Now of course we are looking t... by DomenicTroilo New Member in Splunk Enterprise 01-10-2019 0 1	0	1
Splunk Machine Learning Toolkit - forecasting backward Hi, The kalman filter algorithm for time series forecasting is predicting for old time frame - backward direction. C... by arpitadu Explorer in Splunk Enterprise 01-08-2019 1 1	1	1
Can you help me display a field date based on the following conditions? Hello In the query below I want to display the LasLogon and LastReboot fields from the following date conditions: I... by jip31 Motivator in Splunk Enterprise 01-04-2019 0 4	0	4
How to chart concurrent events Hi, I have events with start_time, end_time and duration in seconds. These are video calls. I'd like to make a chart... by tsushi Explorer in Splunk Enterprise 01-02-2019 0 3	0	3
How do you collect Linux logs from files such as access.log.YY-DD-MM? Hi, I've deployed splunklight-7.2.1 and I am using universal log forwarder to forward logs from a Linux server to my... by w_raza Explorer in Splunk Enterprise 01-01-2019 0 5	0	5
Measuring a rate with pie chart counts and percentages Hi, I'm trying to measure a rate of several different computers. The rate is measured from 0 to 100 and I want to kn... by jamesandy51 Explorer in Splunk Enterprise 12-18-2018 0 1	0	1
How do i set the SPLUNK_HOME location within splunk? by ITUser1 Explorer in Splunk Enterprise 12-12-2018 1 5	1	5
Though I have my script in place in the directory, why is the data input wizard stating: "No Scripts found under the selected path" Hello, I have a universal forwarder installed on Mac OS X and am unable to configure data input to use a script. Th... by securityforward New Member in Splunk Enterprise 12-10-2018 0 5	0	5
In Splunk Free 7.2.1, how come the system directory is missing? Hello, I've got a CentOS 7 vm with a 7.2.1 Splunk Free instance installed. The following Directory, which I need to ... by allison9001 Engager in Splunk Enterprise 12-09-2018 0 2	0	2