Top

Category Activity

Cisco ASA Tcp / UDB Builds in the same graph Hi I am new to splunk so please bear with me if this is a noob kinda question. I am taking syslogs from our Cisco AS... by nelsons New Member in Dashboards & Visualizations 09-20-2010 0 4	0	4
help to capture with rex an event hello everybody, following is the event that i'm trying to capture with rex. [2010-08-05 17:51:11,661][info] INFO c... by Caio_Santos Path Finder in Splunk Search 09-20-2010 0 8	0	8
Appending to a whitelist We're using the unix app to monitor our linux machines. One of the files we need to monitor is /var/log/secure. The u... by Peter_B Explorer in Getting Data In 09-20-2010 2 2	2	2
Timestamp Problem Hi, I'm using Splunk to index logs which timestamp is in the format Y2010M09D17H10N07S00. As Splunk couldn't understa... by liviab Explorer in Getting Data In 09-20-2010 2 5	2	5
Practical limit for monitor inputs? 20000+ directories? We have a configuration that's been idling for over two days, and instead of processing locations that the tailing pr... by parallaxed Path Finder in Getting Data In 09-20-2010 2 14	2	14
Adding intention to second drilldown search Hi, I've got the advanced view below, which has the aim of producing a search-by-domain page for some Apache-like lo... by blinken Explorer in Splunk Search 09-20-2010 3 4	3	4
embed problem of rendering saved search Hi, I want to embed some pages in my application. Everything is Ok except when i want to add the following one(usin... by dianbo_1 Path Finder in Dashboards & Visualizations 09-20-2010 0 4	0	4
Stop search when user leaves dashboard Hi, I'm sure I've come across it, but I didn't bookmark at the time. What is the parameter to stop the search behin... by garfieldconnoll Explorer in Splunk Search 09-19-2010 3 1	3	1
Is there a max number for MAX_EVENTS? I didn't find it mentioned anywhere in the documentation. I might have overlooked it. http://www.splunk.com/base/Doc... by Nicholas_Key Splunk Employee in Security 09-18-2010 0 2	0	2
General question Hi, I've installed splunk in order to see what it's like and what it does. It looks very nice at first glance, but I... by rkleemann New Member in Installation 09-18-2010 0 2	0	2
Summary Indexing - Changed behavior between v4.0.10 & 4.1.2? Hi We have a 4.0.10 instance deployed in production and are currently investigating 4.1.2. We are noticing some ch... by sranga Path Finder in Knowledge Management 09-18-2010 0 5	0	5
Filter input data Hello, We are looking at deploying splunk for our application servers log files, these log files are about 3GB per d... by iokoluke New Member in Getting Data In 09-17-2010 0 2	0	2
What does a anomalies command report mean when giving error: A separating field was not found, carring on without it. The anomalies command reports this error: "A separating field was not found. Carrying on without it." What does that... by rsimmons Splunk Employee in Splunk Search 09-17-2010 0 2	0	2
Which is better NOT or != Here are two searches that are the same. NOT FIELD="value" FIELD!="value" Which should be used? Is this just a per... by skeetermurphy Engager in Splunk Search 09-17-2010 9 2	9	2
Enterprise License update We'v got license violations six times with 500MB license level, but when we update with new license level 20G(stop th... by hjwang Contributor in Security 09-17-2010 0 4	0	4
Problem with Event Duplication I have splunk set up on a few redhat boxes, and I am getting duplicate events from them. One event will list the hos... by muebel SplunkTrust in Getting Data In 09-17-2010 0 2	0	2
how do i get rid of recurring "Error in 'SearchOperator:loadjob':..."? This was a question from IRC: How do I get rid of recurring "Error in 'SearchOperator:loadjob': Cannot find artifact... by sophy Splunk Employee in Alerting 09-17-2010 4 1	4	1
On the Fly KV Generation for Search Language Testing I am hacking away at some searches, and having some difficulties with strings and ints. I would like to set up some ... by muebel SplunkTrust in Splunk Search 09-17-2010 1 1	1	1
Show Source and save as CSV truncate large events? I have records that consist of fairly large (200+ lines, > 20 Kb per record) XML documents. When I export the result... by pde Path Finder in Getting Data In 09-17-2010 0 2	0	2
Searching for large groups of hosts (or any other field), i.e. host=box[100-200].domain.com Hi, We want to search for hundreds of hosts at a time. The question is similar to these: http://answers.splunk.com/... by parallaxed Path Finder in Splunk Search 09-17-2010 0 10	0	10
Extracting fields for a report with regex not working Hi I'm trying to "extract fields" with regular expressions for a specific position on a comma separated log file tha... by henrikb New Member in Splunk Search 09-17-2010 0 2	0	2
I upgraded to 4.1.4 but now I get an error on startup - could not validate indexes - what does this mean? My Splunk instance was working fine before I upgraded to 4.1.4, and now I'm seeing this message. My earlier question... by mctester Communicator in Installation 09-17-2010 1 2	1	2
Getting syslog data into splunk lightweight forwarder Hi, I'm new to splunk, so my question might be lame. I am trying to setup a splunk lightweight forwarder, my problem ... by ultra Explorer in Getting Data In 09-17-2010 0 1	0	1
ERROR :: 'homePath' - what does this mean? When I try to start Splunk it gives the following output - Splunk> CSI: Logfiles. Checking prerequisites... Chec... by mctester Communicator in Monitoring Splunk 09-17-2010 4 4	4	4
ERROR :: ‘homePath’ - Splunk won't start on 4.1.4 upgrade Hi there, I've read the other questions/answers on this issue but I need some further assistance please? Can someon... by mmstrauss New Member in Installation 09-17-2010 0 3	0	3