Using Splunk

Category Activity

Customizing layout of a view I'm creating a dashboard using XML. I've added modules like a timerangepicker, paginator, count to my view. Right now... by snowmizer Communicator in Dashboards & Visualizations 05-07-2010 1 2	1	2
how come some fields disappear when they go into timechart/chart? Im trying to use timechart to pass along the values of a particular field for each time bucket. I know that the fi... by sideview SplunkTrust in Splunk Search 05-07-2010 2 1	2	1
How to select fields for email alert Is there any way to control the reported fields in an email alert? I have configured splunk to add the search results... by Jaci Splunk Employee in Splunk Search 05-07-2010 5 4	5	4
Combining URL fields in reporting I'm trying to build a report of slowest pages/scripts on our server based on times for serving those scripts. This w... by mikebrittain Explorer in Splunk Search 05-07-2010 1 4	1	4
distributed search both ways? Is it possible to have indexer A distribute to indexer B and have B distribute to A? What are the settings for it. J... by dhaffner Path Finder in Splunk Search 05-06-2010 0 5	0	5
How to capture older data through Summary Index Populating Search? Hi If I have a summary-populating-index search that is scheduled to run daily. Is it possible to index data that i... by sranga Path Finder in Splunk Search 05-06-2010 0 2	0	2
Suggestions for line breaking and field extraction of deeply-nested XML configuration files We're stumped how to approach field extraction for XML configuration files for ASP.NET web applications. I want to en... by Justin_Grant Contributor in Splunk Search 05-06-2010 1 2	1	2
How does a Schedule Saved Search work? Hi I have a question about the workings of the scheduled saved search. Suppose I have a slow-running search that h... by sranga Path Finder in Splunk Search 05-06-2010 0 1	0	1
How do I compare fields between two events? Hi, I'm Splunking some report data that is in CSV format, which may or may not matter in the context of this questio... by hacktastic Path Finder in Splunk Search 05-05-2010 4 6	4	6
Why is Firebug reporting "Component returned failure code..."? I'm running Firefox, and on certain dashboards, I'm getting the following error in the Javascript console: Error: un... by Johnvey Contributor in Dashboards & Visualizations 05-05-2010 0 3	0	3
I got a failed to choose a font error message pertaining to my PDF server, how do I correct? I got a failed to choose a font error message pretaining to my PDF server, how do I correct? 2010-05-04 14:51:12,871... by rsimmons Splunk Employee in Reporting 05-05-2010 2 2	2	2
Using Multiple stats list Hello, I am trying to build up a report using multiple stats, but I am having issues with duplication. I will do on... by Hazel Communicator in Splunk Search 05-05-2010 0 5	0	5
Preset Cisco WSA - Acceptable Use - Business - Recent Events returned no value Hi When I ran this preset , there was no results diplayed. What was wrong? by thinguyen Engager in Splunk Search 05-05-2010 1 2	1	2
In dashboard for the "single" panel, is it possible to change the length of the button? In dashboard for the "single" panel, is it possible to change the length of the button? by zliu Splunk Employee in Dashboards & Visualizations 05-05-2010 2 1	2	1
How to limit alert to only one line? Alert was triggered because of: 'Saved Search [fortyfor-test]: number of events(2)' Apr 26 20:59:15 dist puppetd[153... by zliu Splunk Employee in Alerting 05-04-2010 1 4	1	4
Field '_time' should have numerical values. Every time I try to run a report on a search, I get 0 records and the following error in the chart editor: Field '_t... by ayachem New Member in Reporting 05-03-2010 0 1	0	1
how do i remove the saved search warning when i switch to free? I get a message that says Search scheduler is disabled in Splunk's Free version. Scheduled searches that populate th... by jrich523 Path Finder in Reporting 05-03-2010 1 5	1	5
How can I track user activity trending via searches? I am attempting to write a search that can alert if a user deviates from some normal data viewing pattern. The event ... by Peter Path Finder in Splunk Search 05-03-2010 1 16	1	16
Custom multi-line parsing tip I want to chop multiline events like below. I had splunk to automatically process the data, but it didn't quite work... by clyde772 Communicator in Splunk Search 05-03-2010 0 1	0	1
Is there a good source of document for Splunk event correlation? or any suggestions? Anybody out there had experience trying to correlate events with Splunk. A scenario would be like this: (Source : A... by clyde772 Communicator in Alerting 05-03-2010 0 3	0	3
Searching intersection of two subsets Hello Splunkers, Thanks to visit my question. I have two subsets of data related to each other. The set A consists... by nik_splunk Path Finder in Splunk Search 05-02-2010 0 1	0	1
Security search question, F/W log, where one host to multiple host detection. Let assume the following, the data source for analysis is Firewall traffic log. I guess It could be applied to any ... by clyde772 Communicator in Splunk Search 05-02-2010 0 1	0	1
Automatic lookups showing up in other apps I have configured automatic lookups with the intention of using it in only one app (my own ossec app). However, when... by ghnwmlguy Explorer in Splunk Search 04-30-2010 0 4	0	4
Independent PDF Server pros and cons? Has anyone thought through the pros/cons of setting up an external (independent) PDF server vs running the PDF server... by Lowell Super Champion in Reporting 04-30-2010 0 2	0	2
Recursive searches based on parent ids We have logs that do stuff like this: message id=1 message id=2 parent=1 message id=2 parent=1 message id=3 ... by vbumgarn Path Finder in Splunk Search 04-30-2010 2 1	2	1