...rovide a portal that will allow them to view pre-built dashboards / report etc.
All of this I have under control I think — using permissions limit the data visible, and apps to provide the portal w...
...e nice but is not a requirement.
What is the smallest number of servers required for a Splunk Cluster? If I understand the Cluster manual correctly, I need at least three hosts, or four hosts (In...
...omplete in 360 seconds
I'm not sure why it's trying to restart Splunk Web on a deployment client, since I have this disabled. Any ideas on what's hanging this up?
Not new to Splunk, but new to 4.2.2.
I had setup a forwarder and manually entered specific paths to monitor:
/p01/foo/bar/logs/server.log
/p02/foo/bar/logs/server.log
went to on to p50.
I...
We are planning to upgrade from current 6.2.6 to 6.3.4 inthis month. We currently have a distributed setup with about 1TB of incoming data daily from various sources. We have fairly complex q...
I had to migrate a some indexes over from one instance to another. All worked but the 'os' index, and I'm seeing this error in splunkd.log:
ERROR IndexProcessor - caught exception for index=os d...
Lots of posts on this, all are wrong. Both methods (manual modification of outputs.conf files and installing the app from the cloud management interface) fail with the same old errors that e...
Hello!
I'm looking into using the Python SDK's KV store module to do some updating of a KV store. I've noticed that the insert & update functions are separate, leading me to asking this: How s...
...irectory?
Since we can't delete the edited version of the knowledge object from the UI, and we can't manually edit the conf file, what is the recommended way to address this?
More detail:
If y...