Does anyone have a sample inputs.conf for capturing Windows data such as CPU utilization, memory utilization and disk utilization? Just looking for the basics. I could not find any good b...
...o achieve this: Monitornetworkports and it works fine, with no issues. Inputs are correctly added to my Splunk. I can confirm this with no problem on both web GUI and from CLI using btool....
I have an indexer where I want to addindex 'web'
Looking at this page: http://docs.splunk.com/Documentation/Splunk/7.0.2/Indexer/Setupmultipleindexes
It seems you can do this ina couple of w...
...his correct?
Do I have to put the statement disabled = 0 or is it implied?
I haven’t configured anything through Splunkweb, do I need to do that?
Where do I save the inputs.conf file? On t...
HI
We have installed a SH and 4 INDEXERS(Non Clustered). We have installed our app to the SH only with our indexers=mlc_live and or datamodels.
We have set up the forwarders to send data to t...
Hi,
if some one come and ask me to create aindexsplunk to indext the data from the new data source.
what happens if created that index from searchhead
and write a stanza to indexs.conf f...
Hi All,
I was able to get counteract module to forward data using "web_event" sourcetype. However, all the data resides in the "main" index. Does anyone have any tips on how to change the index...
I currently have an Enterprise trial license and was wondering what would happen after the trial ends. Will I still be able to forward data into the instance and create searches?
The the syslog data from our barracuda EMSG is being ingested into Splunk, but I'm having trouble extracting fields from the data. I'm using the regular expression builder, however not all of the d...
...nd script will be executed or stop doing whenever he want. I see almost document on Splunkwebsite, unfortunately don't see any appropriate one.
Can you show me how to do that ?
My indexer/s...