Thread Info | |||||
---|---|---|---|---|---|
I have set up a universal forwarder to forward IIS logs from C:\inetpub\logs\LogFiles\W3SVC7 to my splunk server on p...
by
appmandan
Path Finder
in
Splunk Search
10-27-2011
|
0
|
9
| |||
We recently migrated a search head off an indexer onto a dedicated server. However it would seem that none of the int...
by
pj
Contributor
in
Splunk Search
10-18-2010
|
0
|
5
| |||
Hi,
Can someone tell me how to run a query that will return the size (MB) of total index volume for all logs that...
by
balbano
Contributor
in
Splunk Search
10-21-2011
|
0
|
3
| |||
Hi,
I am having trouble using lookups. I have four fields in a csv file error_code,criticality, service,service_ty...
by
shiva_kolachala
Engager
in
Splunk Search
10-30-2011
|
0
|
1
| |||
Hi all,
I have syslog data coming in - it features a src and dst IP address but how can I write a regex to select ...
by
TheMarkHodgkins
Explorer
in
Splunk Search
10-31-2011
|
1
|
4
| |||
I'm attempting to run a given search to return bandwidth hogs by MBs downloaded. I have a search that will successful...
by
Blu3fish
Path Finder
in
Splunk Search
10-28-2011
|
0
|
3
| |||
I would like count to be the first field when I use top, rather than the last (one of my fields is very long and so c...
by
willthames
Path Finder
in
Splunk Search
02-17-2011
|
2
|
3
| |||
I have a tab delimited log file that looks like:
#Fields: time Data LoginID ContextID
"2011-02-20 21:3...
by
dap263
New Member
in
Splunk Search
10-27-2011
|
0
|
4
| |||
I had a scripted lookup working (the dnslookup using external_lookup.py) with a standalone search head. Now that i've...
by
tpsplunk
Communicator
in
Splunk Search
09-27-2011
|
2
|
8
| |||
Hello,
I would like to set a real time search which counts events occurred starting from the beginning of the day...
by
oreni
Explorer
in
Splunk Search
10-27-2011
|
1
|
3
| |||
Hello community!
We're really stuck on a question ... Basically we are trying to do ask the following question
...
by
dealmak3r
New Member
in
Splunk Search
10-26-2011
|
0
|
2
| |||
Hi,
I have a list of login events, some which fail, some which succeed. In some cases, the IP address that succeed...
by
howyagoin
Contributor
in
Splunk Search
10-26-2011
|
0
|
10
| |||
My question has to deal with regex and the inputs.conf. It's new to me so I'm taking it slow. We have all of our cust...
by
nelsonb
Explorer
in
Splunk Search
10-27-2011
|
0
|
1
| |||
I just did a clean installation of splunk on my windows7 64bit workstation. why is search history not showing up whil...
by
aviadr1
Explorer
in
Splunk Search
09-19-2011
|
0
|
3
| |||
using the opsec lea app and noticed that two of the default kv extract key/value pairs werent working for me. The log...
by
EricPartington
Communicator
in
Splunk Search
07-10-2010
|
1
|
2
| |||
Now, I am collecting a disk space log by using a WMI. I want to make a stacked bar chart about disk space. How can I ...
by
lanying
Explorer
in
Splunk Search
08-02-2011
|
0
|
4
| |||
Hi... Pls forgive me, I have not used Regular Expressions in quite a while, and the following one really threw me. I'...
by
mfeeny1
Path Finder
in
Splunk Search
10-18-2011
|
0
|
2
| |||
Hi all,
I am mainly asking this here as it's a little past my knowledge with Splunk. Basically, I'm after a way of...
by
aaronnicoli
Path Finder
in
Splunk Search
10-23-2011
|
0
|
5
| |||
We have a wireless controller that provides logs. I am trying to construct a search that would provide the number of ...
by
jodros
Builder
in
Splunk Search
10-25-2011
|
1
|
8
| |||
hi. We are splunking this dhcp service we have and we had a problem id like to narrow down with a smart search : I ha...
by
dragmore88
New Member
in
Splunk Search
10-21-2011
|
0
|
3
| |||
Env: Windows 2008 R2, Splunk 4.2.2
For the last month or so most of the Splunk search screens have not been comple...
by
rnadler
Engager
in
Splunk Search
10-25-2011
|
0
|
1
| |||
I have two hosts, one named lower case 'server01', the other named upper case 'SERVER01'. When I do a search such as ...
by
blee_i365
Explorer
in
Splunk Search
07-14-2011
|
0
|
1
| |||
Hi,
I'm trying to create a Search view that only searches on the index I specify. But I don't seem to figure out h...
by
mplacido
Explorer
in
Splunk Search
10-24-2011
|
1
|
3
| |||
I would like to display the average time Oracle is taking to perform a check point. I have filtered out the following...
by
john_kennan
Engager
in
Splunk Search
10-24-2011
|
0
|
1
| |||
Hi,
I am trying to do a timechart which shows the amount of sessions opened/closed. Where the Opened and Closed ar...
by
venterdaniel
Engager
in
Splunk Search
10-19-2011
|
0
|
2
|