Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Search
Splunk Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Search
Search the Community
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
497 results
Sorted by:
03-08-2017
07:49 AM
Hi,
I want to create some tags and associate them with an index. Where would tags.conf be put? Search Head? Indexer?
09-24-2014
10:45 AM
1 Karma
I have an app that I built for a user group. There log on will be restricted by tags. I put the tags.conf file in there app so that I can edit it easily when needed. I ran the (http(s)://s...
01-24-2017
11:15 AM
In TA-meraki, there is a typo in tags.conf that prevents DHCP events from getting the dhcp tag.
[eventtype=meraki-dhcp]
network = enabled
session = enabled
dhcp = enable <-- should be d...
11-30-2012
08:29 AM
...how. Once I used the exact case, the tags worked fine. However this presents issues. I would like to make the tags.conf be case insensitive. Is there a way to accomplish this without adding multiple e...
Labels
- Labels:
-
Other
06-24-2010
05:50 PM
4 Karma
I am beginning to work with tags and am having partial success. I have a tags.conf file that I dropped into the local directory of a new app I created. I then restarted and started to try to s...
09-13-2019
02:07 AM
We need to override a tags & eventtypes from one of the official TA (eg eventtype=ssh_authentication ).
eventtypes.conf have disabled=true at a stanza level, but tags.conf does NOT have s...
06-29-2020
09:16 PM
Can someone please explain the importance of Events.conf & Tags.conf Configuration in Splunk also we use SVN tortoise. better will be if someone can explain with use case ?
Labels
- Labels:
-
Other
12-21-2012
10:39 PM
1 Karma
...estart Splunk to refresh new configuration including tags.conf, but we are trying to find ways to reload dynamically without restarting.
I also understand we have endpoints to support the addition/d...
04-19-2010
06:39 PM
2 Karma
I just updated my indexer to 4.1 this morning and found the following in the migration log:
Cannot automatically migrate pre 4.1
tags.conf : D:\Program
Files\Splunk\etc\apps\SKB-windows\d...
- Tags:
- tags
12-13-2016
09:05 AM
In the Palo Alto Networks Add-on for Splunk (Splunk_TA_paloalto) version 3.7.1, the pan_endpoint stanza is missing tags in the event types.conf file, and the pan_endpoint stanza is missing a...
