Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
301 results
Sorted by:
09-19-2019
06:17 PM
...ueries so that i dont have to log onto each of them and query them individually. I know you can edit the .conf file and create distributed search groups but i'd need to log an RFC for that, so as a proof o...
- Tags:
- distributed-search
02-08-2020
05:45 PM
I have a single indexer and single search head with the indexer attached as a search peer and I created one index called "winevent" on the indexer.
I don't understand why the search head cannot s...
11-21-2016
08:51 AM
1 Karma
...omething like above
some search| stats count by modelScore | sort modelScore
I have the above search to show the distribution of the modelScore using bar visualization.
However, I w...
02-16-2021
03:17 PM
...ther one here states: "You define distributed search groups in distsearch.conf. For example, to create the two search groups NYC and SF, create stanzas like these: You define distributed search...
Labels
- Labels:
-
distributed search
-
search head
-
search peer
07-10-2017
09:08 AM
Hi,
I am struggling with the correct way to approach this. I have VPN data that performs 5 posture checks before clients connect. what I would like to do is summarize the User and the posture che...
02-07-2019
11:31 AM
1 Karma
...hart that breaks down the users in groups, like those who listen between 0-10, the up to 20, 30 etc.
How do I do that in Splunk?
Eva
04-12-2015
04:47 PM
How do i create the 3 column table below in splunk (i.e. Label 1-3 would fall into Group1....etc):
I can get a 2 column table using (column 2 and 3 in the above table):
... | stats max(c...
08-02-2016
09:30 PM
We are using distributed search groups ( http://docs.splunk.com/Documentation/Splunk/6.4.2/DistSearch/Distributedsearchgroups ).
We have 2 sets of indexers: index group A and index group b.
W...
02-13-2015
03:40 AM
1 Karma
Is it possible to set the default distributed search group to nothing but only search within itself (as my search head is also the indexer)?
If i set the distsearch.conf as below, the search r...
11-19-2015
04:43 AM
Good afternoon.
Please forgive my ignorance. I have been 'splunking' now for a few weeks and I am still very much learning as I go.
I have been tasked with creating a distribution graph that s...
