I'm working on making a connection to a virtual provider with a virtualindex I have confirmed with some test data. I've enabled debug for the provider and executed some searches. The search just e...
...earch per day so I find myself creating a virtualindex for every date, and with that I had two questions
• Is there any other way to search by date using the virtualindexes?
• Is there any l...
Hi -
I'm embarking on a re-organization in my splunk environment. I've come into possession of a couple big x86 boxes (4 socket, 8 core, 256GB RAM), and given that I heard multiple times that index...
Hi,
I have 2 virtualindexes, both return data, and both return for a specific search.
But if I try and join and get no results, and if I try an 'or' I get no results.
index=filea ID=2...
...6/asciiflow2014-05-26-02-45-01.csv
..
Given this I am wondering about the virtualindex configuration I have, listed below, is correct?
I seem to search the same amount of time no mater what t...
...ull it into splunk on 192.168.1.2. In the splunk GUI, Settings > VirtualIndexes, I set up my provider (connection to remote server with mongo db) then set up the virtualindex with the credentials t...
I'm currently working on setting up a virtualindex that connects to an Amazon EMR instance and queries data in S3. It is much like this: https://www.splunk.com/blog/2016/10/30/how-to-splunk-a...
We have an Enterprise Splunk instantiation that has clustered virtualindexers. We have been advised that we need real hardware for our indexers to scale up to the size we anticipate. W...
...nd the primary key on the provider table?
I see https://answers.splunk.com/answers/122594/hunk-join-2-virtual-indexes.html, but I'm not clear about it...
Guys,
First day using hunk/splunk. I seem to be set up ok but just can not get anything returned form a VirtualIndex.
The index is pointing to a correct HDFS directory with permissions.
I...