Top

Category Activity

Can you add your own custom alert action? There are a number of existing alerting conditions provided out of the box, such as populate_lookup, rss, email, and ... by Lowell Super Champion in Alerting 08-27-2010 2 3	2	3
transaction and conditional logic I am working on a variation on a transaction query as described here: http://answers.splunk.com/questions/5619/calcul... by bilsch Engager in Splunk Search 08-27-2010 1 2	1	2
PARSER error on drilldown when using table I have a simple table in a dashboard built like this: <table> <title>Test</title> <searc... by bojanz Communicator in Dashboards & Visualizations 08-27-2010 0 1	0	1
MPLS_login_102_1 error message Hi. Some of the scheduled saved searches have stopped running. When click on these saved searches from Search App's ... by alextsui Path Finder in Splunk Search 08-27-2010 0 2	0	2
Row Drilldown ... First Field is too long I have done a drilldown for "SimpleResultsTable" module. Below is my Drilldown settings <module name="SimpleRe... by SamChang Path Finder in Dashboards & Visualizations 08-27-2010 1 2	1	2
Hide primaryAxisTitle and secondaryAxisTitle on Bar/Column chart in dashboard Does anyone know how to hide the primaryAxisTitle and secondaryAxisTitle using either the simple or advanced xml for ... by clincg Path Finder in Splunk Search 08-27-2010 1 1	1	1
What's this duplicate bucket in my index? I've got bucket in my defaultdb/db named things like db_1282889175_1282864311_6-duplicate-0/ What are they? Should I... by jrodman Splunk Employee in Deployment Architecture 08-27-2010 1 1	1	1
interactive pdf Hi Is it possible to create pdf interactive report. I mean to get pdf report with links to results. For example when... by jmaslowski Engager in Splunk Search 08-26-2010 1 1	1	1
Splitting output and field extraction I'm using Subsystem Device Drivers (SDD) on an AIX system to monitor SAN LUNs. When I run "datapath query devstats" c... by Branden Builder in Splunk Search 08-26-2010 0 4	0	4
use of \| savedsearch with custom dashboards ? Is there any way to use the \|savedsearch syntax with realtime searches? Right now I have the view defined below. If... by zscgeek Path Finder in Dashboards & Visualizations 08-26-2010 0 2	0	2
Missing Event details when trying to Extract Fields from an Active Directory event I have the following raw AD event which I can see from my search: 08/16/2010 12:55:56.0110 dcName=w2k3r2.demo.dev ad... by mpatnode Path Finder in Splunk Search 08-26-2010 1 3	1	3
I got a "Streamed search execute failed because" warning message in Splunk? What does this mean? During one of my searches, I got this following error message "Streamed search execute failed because: St9bad_alloc".... by rsimmons Splunk Employee in Deployment Architecture 08-26-2010 1 2	1	2
tables not displaying as desired when using the following search: source="/data/log/rla.log" eventtype="SessionStart" \| convert ctime(_time) as times... by freeti00 Explorer in Splunk Search 08-26-2010 1 2	1	2
Use of autoregress and large time range, but limit results of final search to smaller time range I am trying to make a chart using autoregress with the previous 365 values/days... My time range needs to be at leas... by charlessplunk New Member in Splunk Search 08-26-2010 0 2	0	2
Clarifications about SPLUNK functionality Is SPLUNK an SIEM, SIM or SEM tool? A. Strongly agree B. Slightly agree C. Agree D. Slightly Disagree E. Strong... by alphonzeus New Member in Splunk Search 08-26-2010 0 2	0	2
sub-search search query I'm trying to run a search query like this: host=linux1 DHCPACK \| rex field=_raw "on (?<ip>.) to (?<mac>.)" \| [sea... by lelanb Engager in Splunk Search 08-26-2010 1 3	1	3
inputs.conf and multiple windows AD DC entries for each [WinEventLog: ] stanza in inputs.conf, can you specify more than one entry for evt_dc_name? Because what i... by gsawyer1 Engager in Getting Data In 08-26-2010 0 1	0	1
Using Python Script in search in the GUI Hello, I am still pretty new to Splunk. I have used the python active_directory module (http://timgolden.me.uk/pyth... by kholleran Communicator in Splunk Search 08-26-2010 1 2	1	2
Does the ip_group_city.csv need to be pushed to Indexers also? I haven't gotten it to work. It looks like it wants the ip_group_city.csv on all the indexers. I keep getting this w... by JohnB Explorer in Deployment Architecture 08-26-2010 1 1	1	1
Splunk with Legato Does anyone use Splunk to capture statistics from their Legato back-ups? Legato's mminfo reporting tool doesn't giv... by Branden Builder in Dashboards & Visualizations 08-26-2010 0 1	0	1
What does 'maxQueueSize' in outputs.conf do? We were running some load over the weekend, and ran into an issue where one of our Forwarder nodes went unresponsive.... by mctester Communicator in Splunk Search 08-26-2010 2 1	2	1
IOError: [Errno 37] No locks available I am trying to migrate from 3.4.14 to 4.0.11 on Linux. It all goes smoothly, and it starts without error. However, wh... by stephenbaker Engager in Security 08-26-2010 1 2	1	2
Subtract two timestamps in one event Hopefully this is a simple question, but I haven't found a way to do so using either the convert or eval commands. Ba... by jscottmiller New Member in Splunk Search 08-26-2010 0 2	0	2
Change Password for default admin user Is there a way to change the password for default admin user in the free edition? I get the following error: /opt/s... by niwo Engager in Security 08-26-2010 4 1	4	1
Compare timestamps Is it possible to compare two times and get the difference in seconds? I have a field I am extracting called rec_time... by ericrobinson Path Finder in Splunk Search 08-26-2010 0 1	0	1