Hello,
I have a folder where I have different types of files in it and want to monitor the whole folder as one sourcetype with different props.conf
inputs.conf
[monitor:///mydata/my_folde...
Hi all. I have one SHC with 3 search heads I thought if I create a HEC using web gui in specific memer, others were replicated HEC But NOT how should I do to fix that? my SHC member have replic...
How would I write the props config file for following events, any help will be highly appreciated, thank you! Thu, 01 Jul 2021 00:20:04 -0400|system|flush_vulns|INFO|-1|Removing o...
I need to get the list of .conf files. On running my below Splunk Query,
"| rest /services/configs/conf-props"
it returns the conf objects, but I need to find the .conf files instead of o...
Hello, I have some issues to create PROPS Conf file for following sample data events. It's a text file with header in it. I created one, but not working. Thank you so much, any help will be highly a...
Hello, I wrote a PROPS Configuration file for following csv file but getting error message. Any help will be highly appreciated. Thank you so much. [ csv ] S...
At App Inspect Report the following error comes out for my application: check_reload_trigger_for_all_custom_confs Custom conf file inputs_templates.conf does not have a reload trigger in app.conf...
For example, in props.conf TIME_PREFIX requires a regex. My regex seems to work in my search but does not seem to be applied to my data via the .conf file
Hello, Please let me know how I would write Props Configuration file for this csv file. Segment of sample data for this csv file is given below. Any help will be highly appreciated, thank you! &n...