Splunk Enterprise

Community Activity

Realtime search is very slow When we perform All time search we get the results very quickly. But when we search by selecting Realtime(30seconds, ... by sushildabare Path Finder in Splunk Enterprise 11-20-2013 0 4	0	4
Build data from index Hi, I have an interesting question put by my client. Here in this case splunk listens to a port and starts indexing ... by thirumalreddyb Communicator in Splunk Enterprise 11-18-2013 0 4	0	4
Splunk 6 web interface - not possible to open events in new window from statistics pane In earlier versions of Splunk, it was possible to CTRL-click on statistics results, and have a search with the approp... by bochmann Path Finder in Splunk Enterprise 11-15-2013 5 4	5	4
BigFix for Splunk 6 Is there an update to the Splunk for BigFix app on the way for Splunk 6? I tried installing version 20110203.0, but ... by richgalloway SplunkTrust in Splunk Enterprise 11-13-2013 0 1	0	1
Splunk 6 change in index searching On our Splunk 5 system I can search for a sourcetype and it will be found in any non-internal index. For example, se... by richgalloway SplunkTrust in Splunk Enterprise 10-31-2013 0 1	0	1
Splunk Indexer chewing up disk space We have a 12 node Hadoop Cluster and we are using splunk to index all log files (Hbase, Cloudera Manager, Jobtracker,... by RajaAhmed New Member in Splunk Enterprise 10-30-2013 0 1	0	1
Can I wrap a column when using a Simpleresultstable I need to include sparklines in my results... Is there any way to have columns wrap instead of scroll using this modu... by richnavis Contributor in Splunk Enterprise 10-08-2013 1 1	1	1
How do I configure an index to manage future events? Our developmeent team is using systems with times set in the future, some as far as two years in the future. I'd lik... by I_am_Jeff Communicator in Splunk Enterprise 09-18-2013 0 6	0	6
SPLUNK Forwarders: is there a way to forward types of files in one folder selectively? Hello, I'm trying to limit the amount of data that SPLUNK indexes daily and I noticed that a bunch of our server lo... by lbraginsky New Member in Splunk Enterprise 09-13-2013 0 1	0	1
Java Access Bridge not running with Search Head Pooling Recently installed the Splunk DB Connect app, made sure java was installed, followed what I could find on the require... by bdevlinenova New Member in Splunk Enterprise 09-11-2013 0 17	0	17
trying to replace Snare with Universal Forwarder.. syslog vs TCP We currently use Snare to monitor windows eventlogs and various log files on many windows hosts. Snare currently, suc... by mikefoti Communicator in Splunk Enterprise 08-08-2013 1 6	1	6
Is there any way to globally force all indexes to use a different location for their colddb? Hi everyone. We have a number of devs working on a test server and are running into issues with space. It would be ve... by msarro Builder in Splunk Enterprise 07-31-2013 0 1	0	1
Logs are indexed twice Hi, We have a simple use case. 1. Place the log file in the directory in forwarder node (LWF node). This directory ... by strive Influencer in Splunk Enterprise 06-30-2013 0 2	0	2
How to Blacklist Hosts at the Indexer Let's say, I have 5 forwarders. 4 of them are allowed to forward events to the indexer but one of them is not. How ca... by lpolo Motivator in Splunk Enterprise 06-14-2013 0 6	0	6
Is there any way to selectively re-index data? I know that by deleting the fishbucket index Splunk will re-index everything. Is there a way to selectively re-index... by responsys_cm Builder in Splunk Enterprise 06-05-2013 1 2	1	2
btprobe error I'm running Splunk 4.3.2. When I try and run the btprobe tool, I get the following error: [root@splunk01-dc1 bin]# ... by responsys_cm Builder in Splunk Enterprise 06-05-2013 0 2	0	2
indexing volume limit being exceeded Hello all, I've got what im sure is a simple issue to resolve but i cant for the life of me find any documentation or... by desimpkins Explorer in Splunk Enterprise 06-02-2013 0 5	0	5
Appending to srchIndexesDefault / srchIndexesAllowed For a given role, is there a way to add extend the list of allowed/default indexes, without specifying the entire lis... by southeringtonp Motivator in Splunk Enterprise 05-31-2013 0 3	0	3
Receiver not receiving data from universal forwarder Hi, I'm trying to congfigure a forwarder and the receiver doesn't get any data. Please help. Forwarder's outputs.co... by easedilctl New Member in Splunk Enterprise 05-29-2013 0 6	0	6
How to Turn off indexing on dedicated search head? Splunk Deployment Document Page 98 states: 6. Set up the authentication method you want to use on the search head, ju... by JBarkerMox Explorer in Splunk Enterprise 05-29-2013 0 5	0	5
Universal forwarder constantly at a 100% There are about 1600 files that are actively monitored by the forwarder (64bit, v5.0.2) on our central syslog server.... by mihelic Path Finder in Splunk Enterprise 05-28-2013 0 3	0	3
Using Splunk central repository (the indexed DB) to costum needs Hi, We would like to leverage Splunk repository (the indexed DB?) for bringing parts of the data collected by Splunk... by avital Explorer in Splunk Enterprise 05-20-2013 1 3	1	3
Does anybody have a german version of perfmon.conf for Splunk for Exchange or some experience with it? Hello, we are using the Splunk App for Ms Exchange on Windows servers that are installed in German. I know that this... by btiggemann Path Finder in Splunk Enterprise 05-16-2013 0 2	0	2
Several apps - outputs.conf for each one? Hi everyone. I am trying to figure out how to best approach a deployment server. We are using encryption between ou... by msarro Builder in Splunk Enterprise 05-15-2013 0 2	0	2
search on macro results i'm using the active directory app and i'm trying to search on the fixed dns values. it requires the dns request to ... by gdavid Path Finder in Splunk Enterprise 05-14-2013 0 1	0	1