Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
396 results
Sorted by:
03-19-2017
10:06 PM
...33 : "Alex Bob"}}
I wanted to rename those field names when the events arrive, not when support users search in the application.
For example, I wanted to rename 111 to "TimeStamp"; 222 to "E...
03-19-2017
08:41 AM
...howing the same thing so it looks like the network connectivity between my two servers are working fine.
However, in the log file I am receiving the following:
03-19-2017 15:39:00.074 +0000 W...
12-29-2014
07:29 AM
1 Karma
...ant to do the sorts at search time and not with the forwarder. So could someone tell me what files I would have to edit to make this happen?
So far I see
C:\Program Files\Splunk\etc\apps\search\l...
08-05-2016
08:13 AM
1 Karma
...hile configuring the universal forwarder.
There is a log file in the c: drive of this Windows machine which I want Splunk to source for me to search. Which inputs.conf file should I edit to configur...
12-04-2014
05:45 AM
1 Karma
I got a problem getting splunk to read my XML files correctly.
Example on one of my XML files:
http://imgur.com/RTlYiLy
I want splunk to create a event for every row(the element)
and e...
04-02-2012
02:01 PM
Hi,
I'm just starting to work with Splunk. I am trying to change the definition of events in an input file by editing the props.conf file in the etc/local directory. Unfortunately my edits are h...
- Tags:
- configuration
10-28-2016
02:10 PM
...nvironment. And I repeat, there is no issue over there. However, when I deploy it on prod, it is failing couple of times in each log.
Log sample
= ID: 453608, XXXXXXXXX: **MonitorAll Y...
05-15-2018
01:32 AM
I have a report running in SPLUNK on a daily basis. The timestamp for this report is the "Report Date" field (i.e. today). However, the events are actually from the previous day.
Therefore am I a...
12-12-2016
10:25 PM
1 Karma
...ection of the default transforms.conf file:
[force_sourcetype_for_cisco_asa]
DEST_KEY = MetaData:Sourcetype
REGEX = %ASA-\d-\d{6}
FORMAT = sourcetype::cisco:asa
The configuration shown above w...
09-27-2020
10:07 PM
Hi there, I got the Google Import/export app installed and followed the instructions here How to setup app on how to set it up. When I try to configure the app and give the service a...
Labels
- Labels:
-
configuration
-
troubleshooting
