...axVolumeDataSizeMB = 2800000
[volume:cold]
#DISK SIZE = 8.8TB
path = /splunk_data/cold
maxVolumeDataSizeMB = 8700000
My question is, will this config set volumes globally for all indexes on the indexer? That is, i...
Hi
I have Splunk installed in Paris and we are noticing a large amount of slowness in Splunk when users are logged in via WAN.
We expect some slowness as we are a longer distance away, however i...
Hi Splunkers,
I know that it is possible to match multiple times using rex (using max_match=0).
Can I apply the same logic to a field extraction? I tried .../g , /.../g , (?g)... , none of ...
This should be an easy one:
From a config file perspective, how do I define an app's knowledge object (a savedsearch for example) as being shared globally?
Thus far, I have been unable to f...
On the Global map , i see bubbles on the map for different values. but these bubbles are of different sizes.
What is the reason for this ?
and is it possible to maintain same size bubbles for a...
...ind the Global setting dialog to enable the tokens.
I've looked in settings->data input->event collector but the page has no link to the Global setting dialog. Has it moved?
Mike
I have the value "N/A" that is applied to any field that doesn't have an entry. I need to change this to a numerical value in order to do my charting. How would I accomplish this? 'fillnull' would al...