Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
10,000 results
Sort by:
04-14-2014
12:24 PM
Events were being split improperly when indexed:
One event:
2014-04-14T11:34:59-07:00 Database="<Database>" Active="Active" MasterType="Server" Status="Mounted" PublicFolderDatabase="&l...
03-28-2023
10:40 AM
How often do scripted inputs execute? I want to implement some of these for exchange, but concerned that they will continually execute and cause performance impact. Scripted inputs [s...
Labels
09-17-2024
12:19 PM
Imagine, if you will, table view lookup that has been setup to pull the Host name, the environment (Dev/Test/Prod) and the Server type (Database, Web App, SSO, etc...) and the application the s...
Labels
- Labels:
-
calculated field
-
field extraction
-
other
08-14-2024
12:12 AM
...vents{}.tags.A" | inputcsv append=t Map.csv | stats D as D by C | table "events{}.tags.A" "events{}.tags.B" "events{}.tags.C" "events{}.tags.D" _time | collect index=_xyz_summary marker="s...
Labels
- Labels:
-
lookup
07-31-2024
07:33 AM
...ecure | cron | messages
Hope this makes sense there are multiple subdirectories, the end goal is to monitor secure, cron, and messages
I wrote this stanza within inputs.conf and the configuration d...
Labels
- Labels:
-
inputs.conf
-
Linux
-
universal forwarder
05-06-2024
08:01 AM
...ead-audit-logs_2010_2013.ps1], ignoring alternate expansion [script://C:\Program Files\Splunk\etc\apps\TA-Exchange-Mailbox\bin\exchangepowershell.cmd v15 read-audit-logs_2010_2013.ps1] in inputs.conf
0...
Labels
- Labels:
-
splunkd
a week ago
Hi, My dashboard has 2 inputs, i.e dropdown , time picker. I have a requirement where I need to provide both inputs then only my panels should appear. I tried the same ( below dashboard c...
05-26-2024
05:45 AM
Hey all, I'm building new dashboard that contains 2 multiselect values: Site: USA, Romania, Turkey.... (only countries) Campus: USA1,USA2,Romania1,Romania2.... (contains the country's name and num...
Labels
- Labels:
-
subsearch
06-04-2024
12:53 PM
Hi, I just installed a index cluster and i already know that i shoud place Apps to $SPLUNK_HOME/etc/master-apps/ directoty at my manager node to distribute it accross all indexers but i have 2 q...
Labels
Show results in replies (4)
-
...e necessary, depending on the app. Inputs.conf should be removed or all inputs disabled, for e...
-
I have one more question. Can I use one Heavy Forwarder for all apps with script inputs, or would i...
-
Thanks for your reply. I notice that almost every app uses script inputs (e.g., Splunk Add-on f...
-
...ses script inputs. Of the thousands of app in splunkbase, comparatively few use input scripts. 🙂
08-28-2024
03:46 AM
Hello, Need an urgent help. I am using REST API Modular input and the problem is i am not able to set the parameter for event breaking, below is the sample log. { "User" : [ { "record_id" : "2...
Labels
- Labels:
-
JSON
