Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
54 results
Sort by:
07-11-2018
09:33 AM
...se the same username and password can not login the web interface. If I remove $SPLUNK_HOME/etc/passwd to "passwd.bak" and restart splunk, when I try to login with "admin" it will say "No users exist....
11-20-2020
11:35 AM
1 Karma
...orwarder and how to configure input config file and output config file and how to add monitor command and i have tried installing Splunk forwarder but facing difficulty. Kindly connect and l...
- Tags:
- linux
Labels
- Labels:
-
universal forwarder
06-19-2015
12:13 PM
I use username: admin and password: changeme to log in to my Splunk universal forwarder. I am trying to forward logs from my Ubuntu server that's running on Vagrant VM. I know that the forwarder i...
11-13-2016
07:53 AM
I have a tar.gz file and I wan't to continuously monitor it. I tried to index it to Splunk Enterprise via Settings>Data Inputs>Files&Directories, but when I run a search, Splunk doesn't r...
01-02-2019
07:26 AM
...(Add Data -> Monitor -> Files & Directories) I get this error: "Parameter Name: Path must be absolute".
Is there any way to fix that? How can I check if the Splunk has access to the...
01-31-2022
11:50 AM
1 Karma
...rrors writing to that path. I can run the script in CLI using "./pulldata.sh" as the splunk user and it is fine to write the temp files to the "scripts" directory. I tried to use "/opt/splunk/bin/splunk...
Labels
- Labels:
-
heavy forwarder
-
scripted input
04-26-2017
06:55 AM
Hello,
I have set up my Splunk Enterprise Instance as deployment-server and designated a forwarder on another machine as its deployment client.
In my $SPLUNK_HOME$/etc/deploymentapps/appname/l...
10-12-2016
08:52 AM
...ines to the indexer?
For a fact, I know that if I restart Splunk again, the new lines will be indexed. Please note that it is a production system and manually monitoring files and restarting Splunk i...
05-22-2017
09:24 AM
...uplicated. I did find info on current_only , however it seem this is only for the Windows Event Log Monitor, and not the MONITOR:.
Is there anything we need to make sure we have in place?
How w...
