Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Search
Find Answers
Ask questions. Get answers. Find technical product solutions from passionate members of the Splunk community.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Search
Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
1,371 results
Sort by:
11-29-2017
11:59 AM
1 Karma
Is there any recommended settings for file permissions of .conf files in deployment apps?
For example, I am looking at a deployment app I created using the GUI, and I see in the local folder:
...
08-25-2018
12:14 AM
So here is my search
index=someindex sourcetype=somesourcetype source="someloglocation*" eventtype="nix_kernel_attached" "\"outcome\":\"success\""
| multikv
| mvexpand _raw
| rex field=_raw "\"u...
08-14-2012
02:12 AM
3 Karma
It appears that the built in ps_sos.sh and ps_lsof.sh scripts do not output any data on AIX.
Are the scripts any different from the ones that come with the * NIX app? Could the * NIX app s...
03-06-2019
07:19 AM
Hi everyone!
i logged into my search head and found that the main indexer was at 98% of the total capacity. So i started to look for which host/sourcetype was causing this. I found the search hea...
02-08-2021
07:59 AM
Is there CIM for Software? I have different sources. ePO, ACAS, Windows add-on, and NIX add-on. Would like to using data model from CIM if possible? Here are the CIM I've already l...
11-11-2021
04:44 AM
Hello, I am trying to timechart two event types ONLY: heartbeat and start. However, every event in our Splunk is also mapped as nix-all-logs and few other events by the system admin. A...
Labels
- Labels:
-
timechart
05-29-2024
05:28 AM
I'm very new to this and found we do not have any alerts setup for basic things like Disk space on drives etc, I've done some basic courses but I don't know what to put after Host= to capture all dri...
08-12-2016
06:34 AM
2 Karma
We're in the process of buying another indexing server and my company is set on installing Windows OS on this server. I'm strongly opposed to this as Linux is much easier to use and more reliable. Wh...
Show results in replies (5)
-
...ther than that Splunk is built on nix type systems, and had a nix type mindset, but it really s...
-
...rouble that nobody needs to deal with. Use *NIX instead. Hardly anybody uses Windows for Indexers so i...
-
...iscourse on the pros and cons of each OS without it resulting in a flamewar. In this case, *nix p...
-
...ervers are nix. But again, this can be done with *one windows Splunk HF, too.
-
...upport for, with a nod to *nix if they're reasonably equivalent or if you are doing Enterprise Security....
01-15-2020
04:23 PM
...plunk as splunk per best practice. sh, 2 indexers, 1 uf
I could use some pointers on how to properly deal with Linux TA nix with respects to permissions. The source of my problem could be how I'm e...
03-08-2024
09:36 AM
Any reason why this can't be visualized in a geo cluster map? source="udp:514" index="syslog" NOT src_ip IN (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 17.0.0.0/8) action=DROP src_ip!="162.159.192.9...
Labels
- Labels:
-
count
