Top

Category Activity

Data Extraction in Search Form Here is what I have - 2010-10-05T12:37:55-05:00 xxx.xxx.xxx.xxx [lpr.info] SERVERNAME: Scan ID: 1283612407,Begin: 2... by twgtech New Member in Splunk Search 10-05-2010 0 5	0	5
Scripted authentication (radius) not re-authenticating when new browser loaded We are trying to use radius scripted authentication and have it working. We found an issue (well, we think it is an i... by tawollen Path Finder in Security 10-05-2010 0 2	0	2
Script abruptly stopped working I have a script that runs in an app on my forwarders every 12 hours. Or at least that's what it was doing until it ab... by Branden Builder in Getting Data In 10-05-2010 0 5	0	5
Best way to search using a lookup table? I'm running a search across a bunch of data, say web logs, that has a lot of different src_ips. I make a lookup of a... by Jason Motivator in Splunk Search 10-05-2010 0 2	0	2
Oneshot and Inputs.conf Hi, I recently had to go back and add some historical data that was generated prior to splunk being installed on som... by mgherman Explorer in Getting Data In 10-05-2010 1 2	1	2
Making changes on the app level rather than user level Whenever I (admin user) make a customization to the search app in Splunk, such as a field extraction, Splunk saves th... by Branden Builder in Security 10-05-2010 0 2	0	2
AD Base Filter syntax I am using the "Map users directly" config from here - http://www.splunk.com/base/Documentation/4.1.5/Admin/Setupus... by twgtech New Member in Getting Data In 10-05-2010 0 4	0	4
TimeStamp translation I have a date and time timestamp that looks like DATABASE\|20100226\|123918\|20100226\|083918\| and I want to extract the ... by bc_unixadm Explorer in Getting Data In 10-05-2010 1 3	1	3
How do I navigate forward in the timeline? For example, the timeline is showing 07:59:00 to 08:00:00 (I'm using "reverse"). When I "zoom out" it goes in the wr... by sspalding New Member in Splunk Search 10-05-2010 0 2	0	2
Tailing logfile written with buffered writter We have some logs being written by a buffered writer. This means that occasionally (depending on when the buffer is ... by christopherutz Path Finder in Getting Data In 10-05-2010 2 7	2	7
Parse Log Messages I'm sending a series of events to Splunk with their own time stamp and username info that I built independently of Sp... by mspiegel New Member in Security 10-05-2010 0 3	0	3
How to force Splunk Web to use a proxy server for external calls (e.g. to Splunkbase) on Windows Splunk's web GUI makes a few external calls out, e.g. to load the list of available apps from Splunkbase. If my cor... by Justin_Grant Contributor in Getting Data In 10-05-2010 0 2	0	2
Long Multiline events not breaking correctly Customer has a log file that is failing to break correctly: Some of the events in the file are single line events. Ot... by Genti Splunk Employee in Getting Data In 10-04-2010 0 2	0	2
*Nix App - Collecting data remotely from other host. Without installing Splunk on them Can I run the scripts from this app remotely to other servers and capture information to be displayed in the dashboar... by dannux Path Finder in All Apps and Add-ons 10-04-2010 1 1	1	1
Where can I find information on how to track my indexing volume over time? I am trying to find a search for index volume over time for licensing tracking. I need to search by index or by hos... by mctester Communicator in Getting Data In 10-04-2010 2 3	2	3
How is the peak license-usage figure in the License Manager page handled? Hello, In regards to licenses, can you better explain peak license usage: does the number I see under manager > Lic... by mctester Communicator in Installation 10-04-2010 0 1	0	1
UDP Syslog Host Showing up as IP I have set the UDP syslog port to set hostnames based on DNS. For several hosts this is working fine, however one of ... by Kyle_Brandt Path Finder in Getting Data In 10-04-2010 0 1	0	1
Command or search to list index statistics? We've disabled the UI for our indexers so don't have access to the manager UI for them. The search head UI only show... by the_wolverine Champion in Splunk Search 10-04-2010 1 4	1	4
How to addterm to search using two form fields So i have a static select of values.. and an ExtendedFieldSearch text form field... i would like to "addterm" to a h... by hiddenkirby Contributor in Dashboards & Visualizations 10-04-2010 0 2	0	2
How do you increase the duration that a search sticks around the server? I have alerts that send email to people. These emails contain a link to the search on the splunk server. Often, whe... by muebel SplunkTrust in Splunk Search 10-04-2010 3 3	3	3
DNS Name and not IP for TCPOUT in outputs.conf Can I use an DNS name and not the ip address of the server in the TCPOUT stanza in outputs.conf? Exaple: [tcpout] d... by treinke Builder in Deployment Architecture 10-04-2010 0 1	0	1
Chart count by Duration and User name I have pulled VPN logs and I'd like to report on the duration that a user has used the VPN tunnel. I have found the ... by strueblood Explorer in Splunk Search 10-04-2010 0 6	0	6
SET UNION problem with time reporting Dear All, I'm doing a search with a set UNION, like this: \| SET UNION [SEARCH FOO \| FIELDS fields IP, count] [ SEA... by pinzer Path Finder in Splunk Search 10-04-2010 0 5	0	5
'delete' operator and licensing Hi, all. Is anyone familiar with how using the 'delete' operator in splunk affect licensing? On our network, we hav... by tgiles Path Finder in Installation 10-04-2010 0 4	0	4
SEDCMD and metadata values Hello, please, I would like to know if the SEDCMD command is able to change metadata values like host, source and sou... by cafissimo Communicator in Splunk Search 10-04-2010 1 1	1	1