Top

Category Activity

Help with LDAP configuration? I'm trying to set up LDAP authentication and need some assistance. Where do I go for assistance? by the_wolverine Champion in Security 04-05-2010 2 1	2	1
Search to find hosts sending syslog AND splunkd traffic Any idea how to create a search that finds hosts that are sending BOTH syslog and splunkd traffic? We'd like to turn... by oreoshake Communicator in Installation 04-05-2010 1 2	1	2
Errors Uninstalling Apps with Deployment Server Preventing Splunkd restarts When uninstalling an app, the following errors are preventing splunkd for restarting: 03-30-2010 22:28:12.157 WARN ... by oreoshake Communicator in Deployment Architecture 04-04-2010 1 2	1	2
How you do create the merged_lexicon.lex after a bucket restore? How do you force the creation of the merged_lexicon.lex for a bucket that was manually restored? (And is this possib... by Lowell Super Champion in Deployment Architecture 04-03-2010 0 4	0	4
Why isn't splunkd.log getting forwarded (in 4.0.x, fixed in 4.1) ? UPDATE: This appears to be a bug specifically related to 4.0.10. The following is a work around in system/local/inp... by oreoshake Communicator in Getting Data In 04-03-2010 1 3	1	3
What are some searches I can run to check out the current situation with my queues? I need some help with figuring out some potential blocked queues. What searches can be run to help me figure this ou... by the_wolverine Champion in Monitoring Splunk 04-02-2010 0 2	0	2
My filesystem is full and splunk stopped indexing, how do i make space/start splunk My filesystem is full and splunk wont start. How do i make some last minute filesystem space and start splunk? What a... by Chris_R_ Splunk Employee in Deployment Architecture 04-02-2010 3 2	3	2
ERROR splunklogger - Uncaught exception in pipeline execution (tail) - getting next event Saw this error in splunklogger.log. What does it mean? by Jaci Splunk Employee in Splunk Search 04-01-2010 1 1	1	1
I have some Cisco syslog messages and not all of the fields are being extracted. We are indexing a lot of Cisco syslog messages. I notice that the host field is extracted correctly, but src/dst IP a... by rsimmons Splunk Employee in Splunk Search 04-01-2010 3 3	3	3
How do I set a timerange to be the last full 7 days? I have a script that populates the previous day's data early in the following morning. How do I set a time range such... by Peter Path Finder in Splunk Search 04-01-2010 2 3	2	3
Select Fields at search time I've got a field extraction defined in my props.conf, but now I want to be able to select it in a search without usin... by thepocketwade Path Finder in Splunk Search 04-01-2010 1 5	1	5
can I have a multiline search box? It'd be cool if I could add some line breaks to my search so that visual inspection of what I was typing was a little... by Alan_Bradley Path Finder in Dashboards & Visualizations 04-01-2010 5 4	5	4
What is the procedure to build your own Splunk (search related) function? I have heard that this is possible - please correct me if I am wrong. Firstly, the reason I want to do this. We inde... by Glenn Builder in Splunk Search 04-01-2010 0 4	0	4
Does Splunk ESS include coverage for FISMA compliancy? Does Splunk ESS include coverage for FISMA compliancy? And if so, what specifically within the ESS suite is specific ... by maverick Splunk Employee in Splunk Enterprise Security 03-31-2010 1 4	1	4
How can I easily filter or limit my search down to a specific group of hosts? I have lots of hosts in my environment, but I only want to search across a few of them from time to time. Can I someh... by maverick Splunk Employee in Getting Data In 03-31-2010 1 2	1	2
How can I control the size and number of Splunk's internal logs? Some of our servers are running low on Disk capacity and we are concerned with splunk log files generated and stored ... by Mick Splunk Employee in Monitoring Splunk 03-30-2010 7 2	7	2
Configuring to support searches for events timestamped in future We have an global application hosted within a VM environment feeding a common Splunk index server. However the serve... by matt_1 Explorer in Getting Data In 03-30-2010 0 2	0	2
Can i only change the xyz.py file but not xyz.pyo to extend the module functionality? There are many modules under '$Splunk\share\splunk\search_mrsparkle\modules'. And the module consists of .js, .html, ... by William Path Finder in Splunk Dev 03-30-2010 0 2	0	2
How do I prevent splunk from launching a separate cmd window on windows 7 (and others?) Everytime I run a splunk command on windows 7, the command runs in a separate window and closes before I can see what... by oreoshake Communicator in Getting Data In 03-29-2010 1 2	1	2
Where is the best place for props.conf and transforms.conf? Hi folks I've got a distributed deployment and want to keep the overhead on the splunk forwarders as small as possib... by Simon Contributor in Deployment Architecture 03-29-2010 1 2	1	2
How do I account for many concurrent users when designing my hardware requirements I'm curious how to plan a deployment where i have many concurrent searches. I understand how to account for indexing... by Erik_Swan Splunk Employee in Splunk Search 03-29-2010 1 1	1	1
Best practice for using syslog (Cisco ASA en others) from forwarder (Kiwi Deamon) Hai There, I am dealing with a forwarder to indexer which is reading a kiwi directory with several types of devices.... by Starlette Contributor in Getting Data In 03-29-2010 1 2	1	2
Do sinkholes work on forwarders? Does a sinkhole work on all types of forwarders? by Michael_Wilde Splunk Employee in Getting Data In 03-29-2010 3 1	3	1
start tail monitoring windows event log upon Splunk install What should I attach to my install script if I want to start monitoring the event log in "tail" mode. I don't want t... by BunnyHop Contributor in Installation 03-27-2010 1 7	1	7
How to disable hostname chaining? How to disable hostname chaining? Splunk picks the chained hostname rather than the original. by zliu Splunk Employee in Getting Data In 03-26-2010 0 1	0	1