Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
559 results
Sorted by:
02-03-2016
01:24 PM
...(Index shows 0 data). I tried restarting Splunk server and universal forwarders.
Is the local directory the right dir I should be placing my inputs.conf. Why would one want to use default dir o...
12-05-2017
07:36 AM
...he SNMP Service from your Operating System will accept traps with different community strings.
You have to configure all the needed MIB files into the inputs.conf file. Maybe you have to confert s...
06-11-2012
09:36 PM
...iles are going?
Thanks.
edit: Added follow ups for the suggestions given
>MUS: does the index rca exists on your testing box and are you search that index by default?
Yes and no. I have to...
02-12-2016
12:51 PM
...ulled in I have to make sure only net-new data gets indexed – otherwise there will be duplicate events. To provide the user maximum control, the modular input has a checkpoint-like attribute to keep t...
11-09-2017
05:40 PM
1 Karma
...odular inputs while testing? Is there a way to get a valid sessionkey out of the print-modinput-config command?
$SPLUNK_HOME\bin\splunk" cmd splunkd print-modinput-config simpleinput simpleinput://e...
12-11-2014
12:12 PM
...index and then adding a data input and then select the various source types until I find one that parses the logs as best as possible. The questions I have are as follows:
1) Is it best to go w...
11-12-2015
06:18 AM
...ame string into the REST API Modular Input in Splunk... I'm not sure if it works. I have the data supposedly going to main as a test, but searching the main index brings up no results. I've probably input...
04-17-2010
01:52 AM
I have a test logfile I fed into Splunk:
Apr 13 10:41:16 support05 kernel: [1815783.556088] usb 2-1: new full speed USB device using uhci_hcd and address 32
Apr 13 10:41:16 support05 kernel: [1...
10-14-2017
07:17 AM
...nyone provide guidance on building/modifying the inputs.conf for window event collection from endpoints or point to a good reference?
Also does any one have tips on how they separated the winevent l...
05-11-2020
08:36 AM
...f indexers (indexer1) that stores data for a specific use case, the other platform has also its indexer (indexer2) for another use case. At some point, these 2 platforms will have to collect data from t...
