| | I understand summary indexing can drastically improve the load time of my dashboards. In addition, if I schedule eac... 7 5 | 7 | 5 | |
| | I have a light forwarder (v4.0.7) I want to change this to a forwarder instead of a light forwarder. The reason being... 0 3 | 0 | 3 | |
| | Where can I find the log for the bucket activities? I want to troubleshoot on when Splunk checks bucket sizes and wh... 1 2 | 1 | 2 | |
| | We're upgrading our forwarders and we always get the warning that outputs.conf cannot be migrated. However, simply m... 0 1 | 0 | 1 | |
| | When we build 2 Splunk indexing servers for High Availablity, 2 Splunk indexing servers may receive the same log data... 0 1 | 0 | 1 | |
| | We plan to use Splunk to keep log for several java application including web server like Tomcat. Those application ar... 2 1 | 2 | 1 | |
| | Are search-time fields slow? Can I rely on them to efficiently sort through my data? Are there significant differenc... 5 4 | 5 | 4 | |
| | How do you get splunk to recognize new buckets without restarting splunkd? This makes the process of restoring or mo... 2 2 | 2 | 2 | |
| | Why would there be a gap of logged events in metrics.log between 01-21-2010 15:47:39.421 and 01-22-2010 08:53:28.231 ... 0 5 | 0 | 5 | |
| | We're getting this error when clicking on one of the jobs in "job management": 500 Internal Server Error KeyError... 3 4 | 3 | 4 | |
| | Is it possible to force the results to be used in a report to be case insensitive? For example UDP and udp are shown ... 1 1 | 1 | 1 | |
| | This is related to an earlier question: http://answers.splunk.com/questions/490/why-do-variations-in-sourcetype-appea... 2 5 | 2 | 5 | |
| | I got Your index exceeded your 20.00 GB/day limit again. I would like to know which data inputs cause this. 0 2 | 0 | 2 | |
| | In my environment we make clones of our linux servers so that we don't have to build out a server from scratch for ev... 0 2 | 0 | 2 | |
| | I'm concerned about CLI and REST authentication tokens. How long do those stay valid and is it configurable? 2 1 | 2 | 1 | |
| | Are queries that go to two index servers in different time zones handled correctly? I'm assuming it does, but want to... 0 1 | 0 | 1 | |
| | WHen I try to install it gives me a message that GLIBC-2.3 is required but there is no support to get this package fo... 0 1 | 0 | 1 | |
| | For every Retention key (already extracted by Splunk: 20181947800000) I want to subtract the requestTime="2009-05-26T... 0 1 | 0 | 1 | |
| | We get an alert from sourcetype=ps as a result of running this save search: (authentication failure) OR (Account * to... 0 1 | 0 | 1 | |
| | I do not see in any of the manuals or Help how to add host servers. You label the targets as Host on the main page bu... 1 1 | 1 | 1 | |
| | Hi I would like to have a way to find out whether hosts have stopped logging to our central log infrastructure or i... 0 3 | 0 | 3 | |
| | If a size- or time-based retention policy is set via maxTotalDataSizeMB or frozenTimePeriodInSecs in indexes.conf, ho... 3 2 | 3 | 2 | |
| | I am having trouble getting my head around the search required to graph multiple values from the same log event. It s... 2 5 | 2 | 5 | |
| | We have Splunk as part of our default vm image but we're having some bucket issues. Initially, the time isn't set an... 2 1 | 2 | 1 | |
| | Our office has a specific TRANSACTION search we do frequently to track all events related to a particular user. The s... 0 5 | 0 | 5 | |
