Hello,
I have a source file with a very large event size as I require to use TRUNCATE=1000000 in my props. Do you think....it would be any issue for SPLUNK indexer/UF to handle this large size of T...
...ost on the forum that you can modify the inputs.conf file with a 'maxchars' value so the events don't get cut. Is this the best way to handle this, or would it be better to hack up the event? My c...
Hello ,
We are planning to upgrade Splunk License Server from 7.2.0 to 7.2.2.
Can anyone please help me out with the known issues for the new version on license-handling.
...ember -current_member_uri https://<url>:8089 Any ideas? Should we perform a bootstrap as shown here? https://docs.splunk.com/Documentation/Splunk/8.0.4/DistSearch/Handleraftissues
I am in process of clustering my search heads, but I am receiving the following prompt in the web interface when I click Settings->Search head clustering.
Please wait, the status of your sear...
...nputs.conf. And then maybe create small apps to turn on certain features of the TA per machine type. Is that the right way to do this? Would that even work? I'm thinking there might be issues with the s...
...nd NMS tools. my question is how do other Splunkers handle this? I've typically done, run on cron schedule every 1 min and look back by1 min. Is this the correct way to do it? I've ran into s...