Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
219 results
Sorted by:
01-26-2023
12:54 AM
...I suppose I need to use a props.conf file but I do not where to place it and I do not know how to dynamically set a field = hostname of my machine.
I am using a DS to deploy apps on my HFs b...
Labels
08-15-2022
04:17 AM
...bsp;
According to Configuration file precedence - Splunk Documentation savedsearches.conf is per app/user configuration file. Adding a default.meta for app b with
[savedsearches]
e...
Labels
- Labels:
-
administration
-
configuration
08-11-2023
01:59 AM
Hello, I have deployed an app to a distributed Search Head Cluster. This app contains only a props.conf file in the default directory. In the props.conf there is a calculated field writing a v...
Labels
- Labels:
-
props.conf
10-19-2018
07:32 AM
Hi Splunkers,
I've a situation where _TCP_ROUTING setting in inputs.conf is not being honored by splunk. Here is my architecture and related config files.
HF --> Indexer cluster
On HF, $S...
07-23-2020
08:12 PM
....meta- default access = read : [ * ], write : [ admin ] -app.conf - just the name of the app and the state = enabled. -props.conf
Labels
- Labels:
-
calculated field
04-25-2023
07:12 AM
...oo.log
By default this gets logged to _internal using the foo-too_small source type.
We now want to change the source type to one we created (my:custom:sourcetype). I have created the f...
Labels
- Labels:
-
props.conf
-
sourcetype
09-11-2019
07:42 AM
Hey everyone,
Summary of the long post: On universal forwarders, I need to add some kind of identifier like a tag or metadata value to all data before it is sent to distinguish the environment it...
Labels
- Labels:
-
universal forwarder
08-11-2023
05:19 AM
...etting export to none in the metadata of the app that holds the fields.conf file solved my problem. local/default.meta: [fields]
export = none As seen in the fields.conf Docs: * D...
Labels
- Labels:
-
field extraction
-
fields
10-03-2019
07:08 AM
I am trying to to default particular roles to particular apps by including default_namespace in a user-prefs file inside the target app. This doesn't work.
How do you customize user-prefs and h...
03-08-2021
11:38 AM
...bsp; Running search in verbose mode. All TA abjects are set to global and everyone read permissions. i.e. default.meta file [] access = read : [ * ], write : [ admin ] e...
Labels
- Labels:
-
configuration
-
troubleshooting
