Top

Category Activity

How do I set a hostname? What do I need to do to set the correct hostname for an event? by matt Splunk Employee in Getting Data In 01-15-2010 2 3	2	3
Finalize action for searchscript? I wrote a search operator that takes actions external to splunk. It has to take an action to 'complete' its operatio... by jrodman Splunk Employee in Splunk Search 01-15-2010 2 2	2	2
My coldtofrozen script seems to hang splunk, what can I do? When my selected coldToFrozenScript runs, which can take 10 minutes, the splunk search interface stops working until ... by jrodman Splunk Employee in Getting Data In 01-15-2010 0 1	0	1
Why do my email alerts have garbled headers? I am using Splunk 4 and the email alerts that are sent to me have a bunch on junk in the 'To' and 'From' lines, like:... by Johnvey Contributor in Alerting 01-14-2010 2 1	2	1
historical data on a new installation I just installed splunk and indexed a log file with data that is from earlier this year, The summary dashboard shows ... by benstraw Splunk Employee in Knowledge Management 01-14-2010 1 1	1	1
How do I allow users to edit a view? If our users navigate to Manager --> Views they can see all the views, but they do not have permissions to edit or ad... by matt Splunk Employee in Security 01-14-2010 1 1	1	1
I can't see data I know is indexed I have data indexed but the "all indexed data" dashboard module is empty. Searching for * over all time produces no r... by cfrln Explorer in Getting Data In 01-14-2010 2 2	2	2
how to tell if I have multiline events? Because wc -l of the input doesn't match my event count, and I'm trying to troubleshoot. by V_at_Splunk Splunk Employee in Splunk Search 01-14-2010 1 2	1	2
How do I use the SingleValue module to color code search results? In discussions, Johnvey has suggested to use the SingleValue module to display the output of the results. In fact, wi... by tpaulsen Contributor in Dashboards & Visualizations 11-04-2009 4 2	4	2