Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- About Rocky31
Rocky31
Path Finder
Member since:
12-19-2015
02-19-2026
Community Statistics
| Posts | 83 |
| Solutions | 0 |
| Karma Given | 5 |
| Karma Received | 5 |
| Member Since | 12-19-2015 |
Activity Feed
- Got Karma for Can i send Splunk text alerts to phone numbers?. 10-30-2020 01:49 AM
- Karma Re: How to install splunk app through Linux terminal? for woodcock. 06-05-2020 12:50 AM
- Karma Re: Management port already in use for adonio. 06-05-2020 12:50 AM
- Karma Re: Management port already in use for woodcock. 06-05-2020 12:50 AM
- Karma Re: Help me in creating a index.conf for new index. for koshyk. 06-05-2020 12:50 AM
- Karma Re: Help me in creating a index.conf for new index. for woodcock. 06-05-2020 12:50 AM
- Got Karma for Settings to auto-restart Splunk?. 06-05-2020 12:49 AM
- Got Karma for I want to create an alert from last 7 days. 06-05-2020 12:49 AM
- Got Karma for Re: I have question on SSH, i dont know how connect, anyone Can help me.. 06-05-2020 12:49 AM
- Got Karma for How to pull a audit trail logs who made changes from so and so dates, and i want to create a alert for that.. 06-05-2020 12:48 AM
- Posted Re: Please route me i am at INDEX deadend. on Getting Data In. 06-11-2019 09:29 AM
- Posted Re: Please route me i am at INDEX deadend. on Getting Data In. 06-06-2019 11:49 AM
- Posted Re: Please route me i am at INDEX deadend. on Getting Data In. 06-05-2019 08:11 AM
- Posted Re: How to calculate the index size from all indexers on Splunk Search. 06-05-2019 07:58 AM
- Posted Please route me i am at INDEX deadend. on Getting Data In. 06-04-2019 03:01 PM
- Posted Re: Help me in creating a index.conf for new index. on Splunk Enterprise Security. 05-13-2019 07:15 AM
- Posted Re: Help me in creating a index.conf for new index. on Splunk Enterprise Security. 05-13-2019 07:15 AM
- Posted Re: Help me in creating a index.conf for new index. on Splunk Enterprise Security. 05-10-2019 07:46 AM
- Posted Help me in creating a index.conf for new index. on Splunk Enterprise Security. 05-08-2019 08:35 PM
- Tagged Help me in creating a index.conf for new index. on Splunk Enterprise Security. 05-08-2019 08:35 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 |
12-03-2017
07:46 PM
where to add the line in the that file can you please tell me
any specific line or any where in the file
... View more
12-03-2017
07:41 PM
i have the same issue, i don't the line in splunk-launch.conf
is it i need to add the line in .conf file
... View more
12-03-2017
07:39 PM
Hi where did you added this line OPTIMISTIC_ABOUT_FILE_LOCKING = 1
This is my splunk-launch.conf
# Version 7.0.1
# Modify the following line to suit the location of your Splunk install.
# If unset, Splunk will use the parent of the directory containing the splunk
# CLI executable.
#
# SPLUNK_HOME=/opt/build/splunk-home
# By default, Splunk stores its indexes under SPLUNK_HOME in the
# var/lib/splunk subdirectory. This can be overridden
# here:
#
# SPLUNK_DB=/opt/build/splunk-home/var/lib/splunk
# Splunkd daemon name
SPLUNK_SERVER_NAME=Splunkd
# Splunkweb daemon name
SPLUNK_WEB_NAME=splunkweb
# If SPLUNK_OS_USER is set, then Splunk service will only start
# if the 'splunk [re]start [splunkd]' command is invoked by a user who
# is, or can effectively become via setuid(2), $SPLUNK_OS_USER.
# (This setting can be specified as username or as UID.)
#
# SPLUNK_OS_USER
... View more
12-02-2017
08:58 PM
Checking prerequisites...
Checking http port [8000]: open
Checking mgmt port [8089]: open
Checking appserver port [127.0.0.1:8065]: open
Checking kvstore port [8191]: open
Checking configuration... Done.
Creating: /Applications/splunk/var/lib/splunk
Creating: /Applications/splunk/var/run/splunk
Creating: /Applications/splunk/var/run/splunk/appserver/i18n
Creating: /Applications/splunk/var/run/splunk/appserver/modules/static/css
Creating: /Applications/splunk/var/run/splunk/upload
Creating: /Applications/splunk/var/spool/splunk
Creating: /Applications/splunk/var/spool/dirmoncache
Creating: /Applications/splunk/var/lib/splunk/authDb
Creating: /Applications/splunk/var/lib/splunk/hashDb
New certs have been generated in '/Applications/splunk/etc/auth'.
Checking critical directories... Done
Checking indexes...
homePath='/Applications/splunk/var/lib/splunk/audit/db' of index=_audit on unusable filesystem.
Validating databases (splunkd validatedb) failed with code '1'. If you cannot resolve the issue(s) above after consulting documentation, please file a case online at http://www.splunk.com/page/submit_issue
rockys-MacBook-Pro:bin rocky$ ./splunk status
splunkd is not running.
... View more
- Tags:
- splunk-enterprise
12-01-2017
02:19 PM
How to join in slack, do I need to sign up?
can you share the link with me, please?
... View more
11-30-2017
03:06 PM
I have to onboard Bomgar data to Splunk these are some kind of security logs. I haven't seen any related question and answers here.
First, I have to on board, what is the best practice for the first time onboarding logs.
Any suggestions folks, I haven't found any Apps or TA's for this one.
Thanks in advance
... View more
11-15-2017
12:11 PM
We have around 10 apps installed but I want to find out the common interesting fields in it.
I went through the sourcetype's every app has different interesting fields. Is it I can search for any common and similar fields without spending too much time on each app.
Any suggestion is appreciated.
... View more
- Tags:
- splunk-enterprise
11-10-2017
08:59 AM
I am going to collect web access logs from adobe experience manager.
... View more
11-09-2017
09:23 PM
Hi thanks for your response in the place of host can i give host = ip address like this.
... View more
11-09-2017
12:37 PM
is there any way to check from SH GUI
... View more
11-09-2017
12:31 PM
I do have the IP address of the instance but I have no idea how to pull any info from it. Any help is appreciated.
... View more
11-09-2017
08:19 AM
Any help is appreciated, I want to create an add-on for Adobe Experience Manager, but I don't have any sample data.
Please let me know about any tips.
... View more
11-07-2017
10:57 AM
thank you for your quick reply. I will let you know what data we use it for.
... View more
11-07-2017
10:12 AM
If they are available it's good if not any suggestion, please.
Do I need to create my own TA's if so let me know how to do it?
... View more
- Tags:
- splunk-enterprise
11-06-2017
02:45 PM
We have the project to implement a Splunk infrastructure in AWS where we will index the logs. We will access the indexers from our search heads in our network.
I would like to modify it to add the cloud part in the corresponding parts of the document.
We will integrate different logs.
Among them, we will catch the adobe logs.
I want to see if there is an app and to work on the corresponding TA.
Thanks in advance
... View more
- Tags:
- splunk-enterprise
11-01-2017
04:33 PM
Generally speaking, deployment includes numerous connected processes that make the software work properly.
Exactly this is my question, can you explain me those steps please.
... View more
11-01-2017
04:31 PM
Thank you very much for taking your time.
Can you explain me how syslogs get into an environment through splunk.
... View more
11-01-2017
04:25 PM
You're splunk superstar.
Explain me in your style, I don't have any idea on deployment.
Thanks
splunk beginner.
... View more
11-01-2017
04:22 PM
I dont have any idea sorry about it.
I don't even know how many types of deployments are their,
Kindly, patiently, give me answer that suit to a beginner,
Explain me how deployment works and what it is.
... View more
11-01-2017
04:13 PM
Can i ask u a question, do you really answers his question ?
Every organization follows different style of on boarding,
we all know the documentation "how to add the data" this doc sucks not much helpful.
... View more
10-14-2017
11:05 AM
I have another question, why i don't find output.conf file in splunkforwarder in free splunk on my local instance
location:
MacBook-Pro:local RRRR$ pwd
/Applications/splunkforwarder/etc/system/local
... View more
10-14-2017
08:21 AM
I was hired in an organization as a Splunk onboard specialist, I don't know much about onboarding data. I had gone through getting data in docs but that is not helpful to deal in real time.
Our environment 325 GB/ per day
7 indexers, 4 SH, 100 UF.
Can anyone please share your onboarding knowledge with me.
splunk learner.
Rocky.
... View more
- Tags:
- splunk-enterprise
10-08-2017
06:42 PM
I have gone through splunk docs it is like a puzzle for me to know about deployment.
Can anyone give me perfect answer instead of posting links
... View more
09-06-2017
05:28 PM
On red hat linux. not like when it stops, can i set timing to restart by it self
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-19-2026
11:23 PM
|
Karma from
