| I was moving some buckets around to make some space on my main storage volume. I know the db_* directories are compl... by mctester Communicator in Deployment Architecture 05-05-2010 3 5 | 3 | 5 | ||
| Would I be able to rename a "Source Type" after the data got already indexed into Splunk? Can I rename a type of pat... by clyde772 Communicator in Getting Data In 05-05-2010 1 2 | 1 | 2 | ||
| Hello, I am trying to build up a report using multiple stats, but I am having issues with duplication. I will do on... by Hazel Communicator in Splunk Search 05-05-2010 0 5 | 0 | 5 | ||
| Hi When I ran this preset , there was no results diplayed. What was wrong? by thinguyen Engager in Splunk Search 05-05-2010 1 2 | 1 | 2 | ||
| In dashboard for the "single" panel, is it possible to change the length of the button? by zliu Splunk Employee 2 1 | 2 | 1 | ||
| Alert was triggered because of: 'Saved Search [fortyfor-test]: number of events(2)' Apr 26 20:59:15 dist puppetd[153... 1 4 | 1 | 4 | ||
| On the system affected, I cannot visit the "Manager" page under any the apps except search. I tried to visit the "man... 0 1 | 0 | 1 | ||
| The splunk cold storage file system is 100% full. I'm relatively new to splunk & not sure the proper way to purge. by mctester Communicator in Deployment Architecture 05-04-2010 0 3 | 0 | 3 | ||
| Situation: SSL enabled SplunkWeb. Enterprise evaluation license. Upon connecting to the log-in page, users are presen... 0 2 | 0 | 2 | ||
| I recently upgraded to 4.1.2 from 3.4.x. I needed to remove several hosts from our index, so I followed the instruct... by mkinner Explorer in Getting Data In 05-04-2010 1 2 | 1 | 2 | ||
| It it possible to get the result of current splunk index to a new index files as a new source type? [ Already indexe... by clyde772 Communicator in Getting Data In 05-04-2010 0 3 | 0 | 3 | ||
| Every time I try to run a report on a search, I get 0 records and the following error in the chart editor: Field '_t... 0 1 | 0 | 1 | ||
| My Splunk server is listening to UDP port 514 for syslog information. How can I route data to a given index based on... by cdavidy Explorer in Getting Data In 05-03-2010 0 1 | 0 | 1 | ||
| I get a message that says Search scheduler is disabled in Splunk's Free version. Scheduled searches that populate th... 1 5 | 1 | 5 | ||
| I am attempting to write a search that can alert if a user deviates from some normal data viewing pattern. The event ... by Peter Path Finder in Splunk Search 05-03-2010 1 16 | 1 | 16 | ||
| I want to chop multiline events like below. I had splunk to automatically process the data, but it didn't quite work... by clyde772 Communicator in Splunk Search 05-03-2010 0 1 | 0 | 1 | ||
| Anybody out there had experience trying to correlate events with Splunk. A scenario would be like this: (Source : A... 0 3 | 0 | 3 | ||
| Is there anyway to run an sql like 'plan' on a splunk search to determine efficiency? by bfaber Communicator in Monitoring Splunk 05-03-2010 5 4 | 5 | 4 | ||
| Another License questions, If the Enterprise Demo license got converted to Free license, Then purchase enterprise li... by clyde772 Communicator in Installation 05-03-2010 3 2 | 3 | 2 | ||
| Instead of file being appended, if the file gets overwritted or rewrited, does splunk re-evaluates the entire file da... by clyde772 Communicator in Getting Data In 05-02-2010 1 1 | 1 | 1 | ||
| Hello Splunkers, Thanks to visit my question. I have two subsets of data related to each other. The set A consists... by nik_splunk Path Finder in Splunk Search 05-02-2010 0 1 | 0 | 1 | ||
| Let assume the following, the data source for analysis is Firewall traffic log. I guess It could be applied to any ... by clyde772 Communicator in Splunk Search 05-02-2010 0 1 | 0 | 1 | ||
| I have seen manytime where Splunk didn't copped either multi or single line data correctly ending up with events that... by clyde772 Communicator in Getting Data In 05-01-2010 0 1 | 0 | 1 | ||
| I have configured automatic lookups with the intention of using it in only one app (my own ossec app). However, when... by ghnwmlguy Explorer in Splunk Search 04-30-2010 0 4 | 0 | 4 | ||
| Has anyone thought through the pros/cons of setting up an external (independent) PDF server vs running the PDF server... 0 2 | 0 | 2 |
Splunk has training and education options for everyone, whether it's your first or fiftieth deployment.