Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
3,000 results
Sorted by:
06-15-2020
04:22 AM
...he actual server was i.e. web server, DB server etc.).
So my question is:
- Can the hosts in Splunk be tagged with metadata to describe their function?
Labels
- Labels:
-
universal forwarder
02-23-2018
05:00 AM
...earch head, it's all ok, in the second search head the sourcetype oracle lost the metadata host.
This problem has occurred since I updated to version 7.0.2.
07-09-2010
05:09 PM
2 Karma
I'm trying to restrict the metadata that is available to users of a particular role. The main reason I'm doing this is because I don't want users to be able to see tons of information about d...
Show results in replies (3)
-
...hat metadata to show and what not to show. However, i believe what you are trying to achieve can be d...
-
Index wise, you should be able to restrict the metadata. I'm not completely sure about your p...
-
...ould form lists of hosts/sources/sourcetypes via |metadata and then subset via map according to r...
04-01-2021
05:06 AM
Hello, I'm using metadata on hosts to get their first event time etc, are they accurate even on oldest records? | metadata type=hosts By the way where are they stored? Thanks 🙂
09-29-2015
08:43 AM
1 Karma
Hi,
I have two indizes: dbtrace and dbmsg. The 1st "dbtrace" has trace recs of bags, the 2nd "dbmsg" stores the error msgs with PRIO flag.
A timechart (one line per index) should count the recs f...
08-30-2016
07:37 AM
I'm trying to join hosts from a .csv file to the results of this metadata search:
|metadata type=hosts | eval time_diff = now() - lastTime
The .csv file will have some hosts that don't exist i...
10-15-2015
07:49 AM
...hould I be overriding the host and other metadata? Is it possible to override host and sourcetype for the same log lines?
05-17-2010
05:47 PM
...elong to their country using roles. I would like each user to see on the default dashboard the hosts which they have access to the last reported date and the tag.
I use the following query "| metadata...
Show results in replies (3)
-
i don't see you using the |tags search command and then filtering based on that. The |metadata...
-
...hat I am using when filtering by tags: | metadata type=hosts | tags host | search NOT tag::host=r...
-
The only way I have been able to filter the events while using | metadata type=host is to add a s...
05-10-2021
04:55 AM
Dear all, I'm trying to retrieve some log metadata and associate them to all my events. Exemple: When my application starts, I'll get a few lines with what I'm calling metadata here (v...
Labels
- Labels:
-
field extraction
-
fields
07-09-2013
08:27 AM
I am trying to create a utility using the metadata command that will allow me to see what sourcetypes exist by index. I have started with a command that returns all the sourcetypes for an index i e...
- Tags:
- metadata
