| | Hi All... i'll first describe my scenario.. i have logs that contains entries regarding open ports like: 1-1-2000 ... 0 2 | 0 | 2 | |
| | I want to lock down a user to seeing only one app. I figured out how to set their default dashboard, but i want this... 2 1 | 2 | 1 | |
| | Can I do a live search over multiple Splunk indexers? 1 2 | 1 | 2 | |
| | If there are no results found when a dashboard is rendered instead of having a "NO RESULTS FOUND" message in the dash... 2 1 | 2 | 1 | |
| | My search returns 10 fields in each event and I want to create a table with one row per event and columns for 3 of th... 0 6 | 0 | 6 | |
| | instead of /var/run/splunk? I would like to stay away from having to point to or move the file in a script. 2 1 | 2 | 1 | |
| | Hi! I posted this in the Splunk Forums the other day but I stumbled on Answers this morning and it seems like it m... 1 5 | 1 | 5 | |
| | Hi, We get many alerts sent to us about cpu health under the email heading SERVER HEALTH ALERT - followed by tags. ... 0 4 | 0 | 4 | |
| | Wanted to see what is/are the possible methods to do so. One way I could think of is to export the results using out... 1 7 | 1 | 7 | |
| | I use the following query against a Cisco as5400 to find the number of calls per hour during a day. 10.200.90.19 Cal... 0 4 | 0 | 4 | |
| | After upgrading to 4.1 from 4.0.10 I am unable to get fields using a search from python script. The simplified versio... 0 2 | 0 | 2 | |
| | I am trying to get scripted auth working on the new 4.1. I had a configuration on 3.4.x that worked great but after m... 0 2 | 0 | 2 | |
| | What are the searches required to search across Windows Event Logs for: most recent events of a particular event ID ... 2 1 | 2 | 1 | |
| | Splunk does such an awesome job with distributed search. It seems like all my data is on one server (my search head)... 1 2 | 1 | 2 | |
| | When I run a search on my custom dashboard, I get a notification bar on top stating the status of the dashboard queri... 2 6 | 2 | 6 | |
| | After upgrading to Splunk 4.1 from 4.0.10 today, we find that we can no longer run searches. splunkd.log shows: 04-... 4 1 | 4 | 1 | |
| | If I have a bunch of saved searches I run hourly, what should I consider before switching any or all of them to real ... 2 2 | 2 | 2 | |
| | I'm using Splunk 4.0.10. I've been working on doing field extractions (transforms.conf) on a DB2 log file. I've man... 0 1 | 0 | 1 | |
| | Question: What pipeline module does the sed pre-indexing code run in. I have the following props.conf in my app an... 1 1 | 1 | 1 | |
| | I have a lot of saved searches that populate my summary index and I do not want them to be viewable in the saved sear... 5 3 | 5 | 3 | |
| | Saw this error in splunklogger.log. What does it mean? 1 1 | 1 | 1 | |
| | We are indexing a lot of Cisco syslog messages. I notice that the host field is extracted correctly, but src/dst IP a... 3 3 | 3 | 3 | |
| | I have a script that populates the previous day's data early in the following morning. How do I set a time range such... 2 3 | 2 | 3 | |
| | I've got a field extraction defined in my props.conf, but now I want to be able to select it in a search without usin... 1 5 | 1 | 5 | |
| | It'd be cool if I could add some line breaks to my search so that visual inspection of what I was typing was a little... 5 4 | 5 | 4 | |
