| | I have a REGEX configured (in transforms.conf) that works with my single line events, but appears to be failing on al... 1 3 | 1 | 3 | |
| | I have a 3.4.10 on Linux running without any ( major) issues. However, whenever I have called Splunk Tech Support for... 0 1 | 0 | 1 | |
| | The heat map being the function that highlights outstanding values in a results table, accessible via the "Overlay" d... 0 1 | 0 | 1 | |
| | Currently in the Search App, the Summary page contains the lists of all my sources, sourcetypes, and hosts. However... 6 5 | 6 | 5 | |
| | Which search below is better or optimal from a performance perspective and why? sourcetype="mysoucetype" AND field1=... 4 3 | 4 | 3 | |
| | Currently, if I have FreeBSD 7.2-RELEASE amd64, which one of these Splunk install packages should I use? splunk-4.1.... 0 3 | 0 | 3 | |
| | I've noticed that on Splunk 4.1.3 the timechart and chart commands, when used with "limit=0", the "count" aggregation... 0 2 | 0 | 2 | |
| | I backed up all my data, moved it to a larger secondary drive. Uninstalled and re-installed splunk on top of the back... 0 3 | 0 | 3 | |
| | I am running a scripted input that outputs the "apachectl -S" configuration. I have set the proper permissions, test... 1 1 | 1 | 1 | |
| | I have a field in some events that contains a time as a string. The times are in the format "2010-07-15-13", which t... 0 2 | 0 | 2 | |
| | Hello, my problem is that I want to use splunk to copy the log from snmptrapd.log file to another file and clear the ... 0 1 | 0 | 1 | |
| | Hi, I have a windows 2003 server with apache installed. I will like to monitor its access logs on my splunk server r... 0 1 | 0 | 1 | |
| | I recently update my Ubuntu 64bit system and splunk refuses to start. sudo apt-get dist-upgrade uname -a *Linux 2.6... 0 1 | 0 | 1 | |
| | I am evaluating 4.1 under the free license and have 2 days of data, and am trying to get a feel for the indexing volu... 4 10 | 4 | 10 | |
| | Hello, I was trying to send a pdf report thru email by using a saved search, and in the email an error messages displ... 2 4 | 2 | 4 | |
| | I've tried to delete events for a particular source,say source="tcp:1234" | delete The operation was successful.How... 2 4 | 2 | 4 | |
| | I am building a search to find the average amount of time an action takes: sourcetype="timelog" | stats avg(reque... 0 1 | 0 | 1 | |
| | Hi All, I have been trying to get Splunk to strip off the timestamp and host of forwarded events but do not understa... 1 3 | 1 | 3 | |
| | I run a metadata search that populates a summary page to link to all of my tags. The goal of the summary page is to ... 1 1 | 1 | 1 | |
| | We have a log line that looks like: Jul 14 15:47:34 127.0.0.1 1 [000004ff000216970000489c] Serv foo.com 158578_40df3... 0 1 | 0 | 1 | |
| | I have a tree of files on a forwarder that looks something like the following: /foo/able/ /foo/baker/ /foo/charlie/ ... 1 2 | 1 | 2 | |
| | Greetings experts, I am using syslog-ng and Splunk on the same box. I have configure syslog-ng to pipe the incoming ... 1 3 | 1 | 3 | |
| | I can get email alerting to work just fine on my *nix Splunk instance. In Windows, it doesn't seem to work and I see... 0 1 | 0 | 1 | |
| | Apparently my indexer is stripping out the syslog-ng flag fields ([INFO], [WARNING], and [CRIT]) when indexing syslog... 0 9 | 0 | 9 | |
| | I'm trying to setup a Splunk search head. I'm really trying to convert an existing light-weight forwarder server to ... 1 4 | 1 | 4 | |
