Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
30,000 results
Sorted by:
02-09-2022
06:21 AM
I need to get the list of .conf files. On running my below Splunk Query,
"| rest /services/configs/conf-props"
it returns the conf objects, but I need to find the .conf files instead of o...
Labels
Show results in replies (5)
-
Try | rest /servicesNS/-/-/properties
-
Thanks for quick response! I need to display both config files and views in a single query....
-
The challenge is finding common field values between the two queries so you can merge their results...
-
@richgalloway , The query you mentioned helps to display the properties as config objects, b...
-
@richgalloway , In similar way I need to list all the macros as files instead of config o...
08-05-2021
02:31 PM
How would I write the props config file for following events, any help will be highly appreciated, thank you! Thu, 01 Jul 2021 00:20:04 -0400|system|flush_vulns|INFO|-1|Removing o...
- Tags:
- Props Configuration
Labels
- Labels:
-
regex
08-22-2021
07:00 PM
Hello, I have some issues to create PROPS Conf file for following sample data events. It's a text file with header in it. I created one, but not working. Thank you so much, any help will be highly a...
- Tags:
- PROPS with Header
Labels
- Labels:
-
regex
12-07-2021
12:37 PM
At App Inspect Report the following error comes out for my application: check_reload_trigger_for_all_custom_confs Custom conf file inputs_templates.conf does not have a reload trigger in app.conf...
- Tags:
- appinspect
Labels
- Labels:
-
app
Show results in replies (3)
-
...ooking for the 'conf' stanza within the respective filename. reload.<conf_file_name>.<conf...
-
...ound the following: [triggers] ########## Conf-level reload triggers ########## # Do not force a r...
-
On this issue Github https://github.com/guilhemmarchand/TA-jira-service-desk-simple-addon/issues/1...
05-14-2021
01:18 AM
I want to set maxTotalDataSizeMB to 2000000 (~2TB). Is there are more human readable way of writing this? e.g. 2,000,000 2_000_000 2e6
- Tags:
- administration
Labels
- Labels:
-
administration
08-15-2021
05:17 PM
Hello, I wrote a PROPS Configuration file for following csv file but getting error message. Any help will be highly appreciated. Thank you so much. [ csv ] S...
- Tags:
- PROPS for csv
Labels
- Labels:
-
regex
07-15-2021
01:45 PM
Hello, Please let me know how I would write Props Configuration file for this csv file. Segment of sample data for this csv file is given below. Any help will be highly appreciated, thank you! &n...
- Tags:
- props.conf
Labels
- Labels:
-
field extraction
05-02-2014
04:49 AM
Hi,
we know about the cipherSuite option to set and configure the SSL cipher to be used. But since it can be set in various places it is not completely clear which config has what effect for a...
- Tags:
- ciphersuite
- ssl
Show results in replies (5)
-
Hi, as you already know the cipherSuite option can be set in server.conf, web.conf and inputs....
-
It also appears that the server.conf cipherSuite controls HTTP (HEC) inputs as well.
-
...eb.conf configuration controls the outbound connection to the deployment server.
-
Better late, than never 😉 There is an option in outputs.conf but the docs are a bit conf...
-
Even later to the party, and arriving with nothing more to offer than the bleeding obvious: the SSL...
04-22-2021
11:13 PM
We are deploying SHC into AWS via pipeline code and attempting to configure SAML integration as part of the build but having some issues. When I check using btool, all the saml details are c...
Labels
- Labels:
-
configuration
-
using Splunk Enterprise
02-06-2018
01:04 PM
I've got my Universal Forwarder doing indexing on some data sources for my Splunk instance. After spending some time directly editing the Universal Forwarder's /opt/splunkforwarder/etc/apps/_server_...
