Could someone please help me with the Splunk query to configure the alert if Forwarder, Indexer, or search head had restart? @scelikok @soutamo @saravanan90 @thambisetty @I...
Hi All , My query was is there any way we can reload the changed python script without restarting the splunk everytime?
I understand we have _bump for javascript and CSS & debug/refresh f...
Hi All, Do we need an indexer restart in non clustered search peers for these changes? Is reloading not enough? https://docs.splunk.com/Documentation/Splunk/8.2.0/Indexer/D...
...eport_builder_display
enableSched = 1
realtime_schedule = 0
request.ui_dispatch_view = report_builder_display
search = <our search query>
When we repeatedly power off and on the indexer, the number of e...
Hi,
I have sent a query manually to the background as a job. It will run quite long since the disks are not the fastest ones and the timeframe is 6 months. Will Splunk resume the query once the s...
Whenever when I restart or stop and start the Splunk Enterprise instance running in my HF or DM server i am getting this message as below but anyhow the splunk process is getting started as expected....
...onnect query on one of the databases and kill Java in Task Manager, then re-run the query. All connections will start working until the next Splunk restart.
I’ve been trying to figure this out for a l...
Hi, So I am trying to build SPL for how long does it take to restart splunk. BIt of context, We do sometimes do rolling restart through Cluster Master. So I am trying to determine, how long does r...
hi all,
i have this logs which i am interested in know if there is a agent restarted after certain period when the agent got stop
index=unix sourcetype=syslog
centrifyEventID=17000&n...
...tatus in last 15 min and sends the list of indexers that were down in that time period. This causes ambiguity as whenever a rolling restart is done we start getting the alert.
Query:
index=_...