Top

Category Activity

Forwarding select data in my environment. I'm trying to take data from specific systems and, after indexing it, forward it to a third party for other analysis.... by Steve_Litras Path Finder in Getting Data In 09-20-2010 3 3	3	3
Clarification on why our license is tripping we have a license for our QA environment for 500MB. We wanted to have the same functions (deployment, alerts, securit... by atulmistry Engager in Monitoring Splunk 09-20-2010 4 2	4	2
Total Space For SplunkDB Hi, Now I know you can set the following in indexes.conf maxTotalDataSizeMB = 500000 which sets the max size of the ... by Josh Path Finder in Getting Data In 09-20-2010 1 8	1	8
Splunk on AWS EC2 Hi, We're working with Splunk on Amazon's EC2 service (Ubuntu). At the moment we're working off a standard instance... by garfieldconnoll Explorer in Deployment Architecture 09-20-2010 1 3	1	3
Multiple indexes/Custom app I am writing an app for my team to use. Let's call the app xyz. The app will make use of various inputs, saved search... by Branden Builder in Getting Data In 09-20-2010 0 2	0	2
Cisco ASA Tcp / UDB Builds in the same graph Hi I am new to splunk so please bear with me if this is a noob kinda question. I am taking syslogs from our Cisco AS... by nelsons New Member in Dashboards & Visualizations 09-20-2010 0 4	0	4
help to capture with rex an event hello everybody, following is the event that i'm trying to capture with rex. [2010-08-05 17:51:11,661][info] INFO c... by Caio_Santos Path Finder in Splunk Search 09-20-2010 0 8	0	8
Appending to a whitelist We're using the unix app to monitor our linux machines. One of the files we need to monitor is /var/log/secure. The u... by Peter_B Explorer in Getting Data In 09-20-2010 2 2	2	2
Timestamp Problem Hi, I'm using Splunk to index logs which timestamp is in the format Y2010M09D17H10N07S00. As Splunk couldn't understa... by liviab Explorer in Getting Data In 09-20-2010 2 5	2	5
Practical limit for monitor inputs? 20000+ directories? We have a configuration that's been idling for over two days, and instead of processing locations that the tailing pr... by parallaxed Path Finder in Getting Data In 09-20-2010 2 14	2	14
Adding intention to second drilldown search Hi, I've got the advanced view below, which has the aim of producing a search-by-domain page for some Apache-like lo... by blinken Explorer in Splunk Search 09-20-2010 3 4	3	4
embed problem of rendering saved search Hi, I want to embed some pages in my application. Everything is Ok except when i want to add the following one(usin... by dianbo_1 Path Finder in Dashboards & Visualizations 09-20-2010 0 4	0	4
Stop search when user leaves dashboard Hi, I'm sure I've come across it, but I didn't bookmark at the time. What is the parameter to stop the search behin... by garfieldconnoll Explorer in Splunk Search 09-19-2010 3 1	3	1
Is there a max number for MAX_EVENTS? I didn't find it mentioned anywhere in the documentation. I might have overlooked it. http://www.splunk.com/base/Doc... by Nicholas_Key Splunk Employee in Security 09-18-2010 0 2	0	2
General question Hi, I've installed splunk in order to see what it's like and what it does. It looks very nice at first glance, but I... by rkleemann New Member in Installation 09-18-2010 0 2	0	2
Summary Indexing - Changed behavior between v4.0.10 & 4.1.2? Hi We have a 4.0.10 instance deployed in production and are currently investigating 4.1.2. We are noticing some ch... by sranga Path Finder in Knowledge Management 09-18-2010 0 5	0	5
Filter input data Hello, We are looking at deploying splunk for our application servers log files, these log files are about 3GB per d... by iokoluke New Member in Getting Data In 09-17-2010 0 2	0	2
What does a anomalies command report mean when giving error: A separating field was not found, carring on without it. The anomalies command reports this error: "A separating field was not found. Carrying on without it." What does that... by rsimmons Splunk Employee in Splunk Search 09-17-2010 0 2	0	2
Which is better NOT or != Here are two searches that are the same. NOT FIELD="value" FIELD!="value" Which should be used? Is this just a per... by skeetermurphy Engager in Splunk Search 09-17-2010 9 2	9	2
Enterprise License update We'v got license violations six times with 500MB license level, but when we update with new license level 20G(stop th... by hjwang Contributor in Security 09-17-2010 0 4	0	4
Problem with Event Duplication I have splunk set up on a few redhat boxes, and I am getting duplicate events from them. One event will list the hos... by muebel SplunkTrust in Getting Data In 09-17-2010 0 2	0	2
how do i get rid of recurring "Error in 'SearchOperator:loadjob':..."? This was a question from IRC: How do I get rid of recurring "Error in 'SearchOperator:loadjob': Cannot find artifact... by sophy Splunk Employee in Alerting 09-17-2010 4 1	4	1
On the Fly KV Generation for Search Language Testing I am hacking away at some searches, and having some difficulties with strings and ints. I would like to set up some ... by muebel SplunkTrust in Splunk Search 09-17-2010 1 1	1	1
Show Source and save as CSV truncate large events? I have records that consist of fairly large (200+ lines, > 20 Kb per record) XML documents. When I export the result... by pde Path Finder in Getting Data In 09-17-2010 0 2	0	2
Searching for large groups of hosts (or any other field), i.e. host=box[100-200].domain.com Hi, We want to search for hundreds of hosts at a time. The question is similar to these: http://answers.splunk.com/... by parallaxed Path Finder in Splunk Search 09-17-2010 0 10	0	10