| | My scheduled search: [Summary Logins Per Second] action.summary_index = 1 action.summary_index._name = lgn-stats cro... 0 2 | 0 | 2 | |
| | How to send syslog-ng messages to Splunk properly? I'm using Free 'splunk-4.1.4-82143-linux-2.6-intel.deb' and 'syslo... 3 4 | 3 | 4 | |
| | Is it possible to use the oneshot command from a remote server. Essentially we have a series of logs that are not ab... 0 4 | 0 | 4 | |
| | Running splunk on windows2003. I am getting the events but it seems my regex is not working right on the event. Sam... 0 1 | 0 | 1 | |
| | Is it possible for a custom search script to launch another splunk search? I've been looking over the docs and sourc... 1 7 | 1 | 7 | |
| | Hello, I have a search that looks for a particular set of data. if the data comes from a particular source address,... 1 1 | 1 | 1 | |
| | Hello, I have a log file with a very long record (about 255 chars) and I would like to know if and how is it possible... 0 1 | 0 | 1 | |
| | Hello, I am asking a lot of questions today (obviously new to Splunk and in implementation...). We do NOT use AD fo... 2 2 | 2 | 2 | |
| | I have a log, representing data from multiple hosts, with lines like this: 7/30/2010 4:11:52 PM host=OAK06VMH load=5... 1 1 | 1 | 1 | |
| | In other words, can I set 30 days OR 700G (for instance)? The docs aren't clear on how to do that. 0 1 | 0 | 1 | |
| | I'm trying to develop a regex to separate merged events from a log. Here's my stanza in props.conf: [source=c:\temp\... 0 2 | 0 | 2 | |
| | I am looking to give anonymous access to some specific dashboards that I made so that anyone can access them. I canno... 1 1 | 1 | 1 | |
| | Hello all, I'm new to Splunk, so please bear with me as I ask a really n00bish question. Is it necessary to define y... 1 3 | 1 | 3 | |
| | On Windows, I want to set the homePath in my indexes.conf file for a new index I created, which is located on my E:\ ... 0 1 | 0 | 1 | |
| | I have a WMI Perf counter query that always returns zero in Splunk as the values are always < 1 second. It looks like... 0 1 | 0 | 1 | |
| | I see that I can set the output_mode on a GET request to be JSON, but I'd like the same to happen with a POST. Curre... 1 7 | 1 | 7 | |
| | Is there a search to check bundles delivered from search head to peers? 2 2 | 2 | 2 | |
| | For starters this app is amazing. I am trying to search a ton of log files for a certain error and its definitely do... 0 1 | 0 | 1 | |
| | I am trying to analyse a squid access log for top 10 reports (top sources, top destinations, etc.) I imported the lo... 1 5 | 1 | 5 | |
| | In this answer I can see there is ways to get the status of the tailing processor on a box. Only problem is it looks ... 0 2 | 0 | 2 | |
| | I'm trying to create a report that will show a month worth of data in 20 minute spans. I have the spans set at 20 min... 0 3 | 0 | 3 | |
| | Can someone tell me why this doesn't work right? The time picker works when I change the time range but the host cho... 0 5 | 0 | 5 | |
| | I turned off the syslog server running alongside Splunk and configured Splunk to listen on 514. It indexed the forwar... 1 3 | 1 | 3 | |
| | Below are the two files tcodesNew.csv paste.plurk.com/show/284992 chlogNew.csv paste.plurk.com/show/284990 I am tryi... 0 1 | 0 | 1 | |
| | Can Splunk index SQL LDF and MDF files? 0 2 | 0 | 2 | |
