Splunk Enterprise

Community Activity

After upgrading to 7.1.2, why are users unable to change their passwords? We upgraded from 7.0.2 to 7.1.2 and now users are unable to change passwords. splunkd.log = ERROR AdminHandler:Auth... by moorvogi Path Finder in Splunk Enterprise 09-10-2018 0 9	0	9
Regarding my search head cluster Hello, I have 2 search heads (sh), 2 indexers, 1 heavy forwarder, and 1 deployment in my environment. The deploym... by satyaallaparthi Communicator in Splunk Enterprise 09-09-2018 0 1	0	1
How do I set up a global whitelist? First of all, thanks for the help. I do not have much experience with Splunk. I'm compiling security events, but I ... by kinomakino New Member in Splunk Enterprise 08-31-2018 0 0	0	0
How to use the font of Splunk 6 for Splunk 7? Hi All! I want to use the font of splunk 6 for splunk 7. How can I do this? by vumanhtai Path Finder in Splunk Enterprise 08-30-2018 1 3	1	3
Can I login to Splunk Light with Active Directory credentials? Is it possible to login to Splunk Light using Active Directory credentials, or am I limited to login accounts that I ... by bwarholak New Member in Splunk Enterprise 08-27-2018 0 5	0	5
Format different dates in Splunk 7.1.1 We have a Field, say, XYZ with date-time values but format for all values is not same. For some values format is "MM/... by snigdhasaxena Communicator in Splunk Enterprise 08-27-2018 0 9	0	9
How to sort severity in search? Hello all, I am very new to Splunk and I am looking to sort by the following command: index=server-farm Risk=Criti... by Ropermark New Member in Splunk Enterprise 08-25-2018 0 4	0	4
Fixup Status Message is "Waiting 'target_wait_time' before search factor fixup", but target_wait_time setting is much less than Time in Fixup In Splunk 7.1.0 with Multi-site Index Cluster, I have a bucket that has been pending fixup for more than 1 hour. The... by timothywatson Path Finder in Splunk Enterprise 08-25-2018 9 1	9	1
What is MSICreated app in splunk. how it is created and its use Hi , someone please answer on this. I see "MSICreated" app created on some splunkforwaders. But, I was not there wh... by mala_splunk_91 Explorer in Splunk Enterprise 08-21-2018 0 1	0	1
change text color of the field name/ Hide field name Hello Guys, I have a field named count, when displaying in the donut visualization, field name count is also display... by Chinmai Explorer in Splunk Enterprise 08-20-2018 0 2	0	2
How to remove characters from the end of a field? I have a file called "HelpDeskUsers" I would like to remove the names from the end of the field. HelpDesk Users 134... by ajdyer2000 Path Finder in Splunk Enterprise 08-16-2018 0 4	0	4
Main differences between Splunk Enterprise and Splunk Cloud Currently we have an all On-Prem Splunk enterprise environment. From an administration perspective what is the diffe... by JoeSco27 Communicator in Splunk Enterprise 08-16-2018 0 5	0	5
How to push updates from SH deployer and Index Cluster master? I had to update a props.conf and I am trying to push it via my Index cluster master and my sh cluster deployer. wh... by pfabrizi Path Finder in Splunk Enterprise 08-16-2018 0 3	0	3
Can we monitor the swap space usage on the forwarder? We had a couple of cases recently, in which the swap space usage was very high on several Linux servers. Is it possib... by ddrillic Ultra Champion in Splunk Enterprise 08-14-2018 1 4	1	4
How do I limit an app to only search one cluster if the SH is connected to several clusters Currently on 7.1.0 and I have two separate index clusters with different data and purpose, lets name them A and B. I ... by janlar Explorer in Splunk Enterprise 08-14-2018 0 5	0	5
I can not activate a free version of splunk light. I can not activate a free version of splunk light. When I log in, I receive a message that the test time has expired... by kcscoelho Explorer in Splunk Enterprise 08-13-2018 0 10	0	10
Universal forwarderからのログの受信設定について現在Universal forwarderからindex&Search用Splunkへファイアウォールのログを転送しています。受信側（index&Search）にsourcetypeとindexを指定してログを取り込むよう設定したの... by dum0785 New Member in Splunk Enterprise 08-13-2018 0 2	0	2
Splunk Universal Forwarder with WebSphere App Server I'm confused by the documentation. In some places it says you need a Heavy Forwarder to use the WAS app, yet in the ... by glitchcowboy Path Finder in Splunk Enterprise 08-12-2018 1 5	1	5
Do i create indexs on Search head or on each indexer on non cluster envioment Hi, We have a indexer{2 indexers] in our environment, 2 fowarder and 1 search heads. If we create indexes on a searc... by smdasim Explorer in Splunk Enterprise 08-12-2018 0 2	0	2
Splunk Drill Down Option Issue Hi , I am trying to create a dashboard for Error OR fail* from application logs. There are three hosts from where da... by kaushal21rajput New Member in Splunk Enterprise 08-11-2018 0 3	0	3
Active Directory – Failed Login Events - SPL – Which is most efficient and why? Community, New to Splunk, first post, your patience is appreciated. Also, thank you in advance. This post is focuse... by 018Porta4 New Member in Splunk Enterprise 08-09-2018 0 3	0	3
Does Splunk use .spec files? May I know whether .spec files used just for user information or they will also be used by Splunk processes? Having .... by ankithreddy777 Contributor in Splunk Enterprise 08-07-2018 1 4	1	4
Search Head getting crashed Our Primary search head got crashed twice today. When cross verified we found out this is the error message in Crash.... by anandhalagarasa Path Finder in Splunk Enterprise 08-03-2018 0 4	0	4
Why can I not access the web management interface? I use Splunk OVA on Vmware environment. I following to setup http://docs.splunk.com/Documentation/OVAVMW/3.4.2/OVADCN... by momaydopod New Member in Splunk Enterprise 08-02-2018 0 1	0	1
How can update splunk agent I can't find any information at docs.splunk how can update agents at machines. Sometime ago I found post where wrote ... by atyshke1 Path Finder in Splunk Enterprise 07-31-2018 0 1	0	1