Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
11 results
Sorted by:
04-22-2010
11:59 AM
2 Karma
...ia HTTP (htaccess protected) and FTP. Due to how the log files are handled, their file names include the date.
Due to these servers belonging to ISPs, I cannot install the normal Splunk f...
12-17-2018
02:35 PM
...xplorer, renamed folder form "a4" to "b4" .
And repeated Step1 and pointed to D:\b4
However, after running search on the new data input directory, get no results. Checked C:\Program Files\Splunk\e...
12-28-2018
10:51 AM
1 Karma
In system/default/inputs.conf, I see a stanza like this ...
[monitor://$SPLUNK_HOME/var/log/splunk]
I don't see a file mask at the end of the path, so I assume that it is just going to i...
11-29-2017
10:39 AM
We have an issue where for some reason, Splunk stops reading a log file in a particular Data Input folder. The log is set to roll hourly.
If we disable the Data Input, and then Re-Enable it, it s...
03-06-2019
11:31 AM
3 Karma
I have a mixed *nix and Windows environment and I'm currently collecting the Windows data with the Splunk Add-on for Microsoft Windows as event data. I want to start using the Splunk App for I...
07-29-2016
05:52 PM
3 Karma
Hi,
I noticed that, right after a log rotation, the data is not being indexed anymore.
Data is still going through /var/log/myapp.log and /var/log/messages (rsyslog UDP), so it all arrives on the...
05-03-2016
03:04 PM
...erver.
The Splunk server has been filled to capacity and the partition where we store its logs is at 100%. So it seems like Like Rotation was never setup.
I read the info at this link below, b...
05-27-2017
08:02 PM
I have a source as ///application.log in my inputs.conf.On the servers the application.log will be rolled when it fill up with 10Mb by creating the file name as application.12-13-2014.log and new file...
- Tags:
- splunk-cloud
05-25-2015
12:03 AM
...One issue with this is that Splunk will re-index all the files.
Can anyone please suggest how to ignore the older files??/
- Tags:
- header
- initCrcLength
