Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About chimbudp
chimbudp
Contributor
Member since:
01-16-2013
02-09-2023
Community Statistics
| Posts | 108 |
| Solutions | 6 |
| Karma Given | 46 |
| Karma Received | 26 |
| Member Since | 01-16-2013 |
Activity Feed
- Posted Splunk logs : After randomization, why current is first in the list swapping with last item? on Getting Data In. 02-09-2023 02:08 AM
- Got Karma for Re: Configure application view for 2 different users -. 11-09-2020 05:52 AM
- Karma Re: Is it possible to change the sourcetype of an ingested log to a different sourcetype without affecting the index? for splunker12er. 06-05-2020 12:49 AM
- Karma Re: Do all the Splunk Enterprise Apps work with Splunk Light? for andrewb_splunk. 06-05-2020 12:48 AM
- Karma Re: How Polling "interval" affect the granularity of the data ? for BobM. 06-05-2020 12:46 AM
- Karma Re: SSO and user session timeout for linu1988. 06-05-2020 12:46 AM
- Karma Re: splunkd service does not start when the server is rebooted for mpaniagua_splun. 06-05-2020 12:46 AM
- Karma Re: cpu.sh is not working in new unix app for Dimitri_McKay. 06-05-2020 12:46 AM
- Karma a few tips on calling REST endpoints for V_at_Splunk. 06-05-2020 12:46 AM
- Karma Re: Where is my data get stored in Splunk ? for Drainy. 06-05-2020 12:46 AM
- Karma Re: Availability of indexed data for sdaniels. 06-05-2020 12:46 AM
- Karma Re: If a cold to frozen script fails, what happens? for roychen. 06-05-2020 12:46 AM
- Karma Re: Splunk DB Connect - MySQL Connection for jspears. 06-05-2020 12:46 AM
- Karma Re: Realtime clock of Splunk server time on dashboard? for sideview. 06-05-2020 12:46 AM
- Karma Re: If my windows firewall service is Stopped - will Splunk have any trouble ? for DaveSavage. 06-05-2020 12:46 AM
- Karma Re: Index web (URL) data in Splunk and present in splunk dashbaord for Ayn. 06-05-2020 12:46 AM
- Karma Re: Index web (URL) data in Splunk and present in splunk dashbaord for sbsbb. 06-05-2020 12:46 AM
- Karma Re: Splunk app for Citrix Xen App - forwarding data & Monitoring for jconger. 06-05-2020 12:46 AM
- Karma Re: how to export a splunk app to .spl for MuS. 06-05-2020 12:46 AM
- Karma Re: Creating multiple license pools for MuS. 06-05-2020 12:46 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 1 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
02-19-2013
07:30 AM
Hello Ayn,
inputs.conf as in Universal forwarder:
[monitor://C:\Windows\assembly]
disabled = 0
index = Assembly_Monitor
sourcetype = assembly_logs
props.conf in UF & indexer :
[assembly_logs]
KV_MODE = xml
But , i am not getting any data into Splunk now .
... View more
02-19-2013
06:04 AM
I can able to get the data into Splunk after i set the props.conf :
[Assembly]
NO_BINARY_CHECK = true
Now ,i am getting all the binary data - how can i get the relevant fields ?
Like Assembly name, date created , Version ., etc.
... View more
02-19-2013
04:22 AM
I need to monitor the Assembly folder in Windows Server :
[monitor://C:\Windows\assembly]
index=Assembly_monitor
the above stanza forwards no data into Splunk indexer.
i have set the source type as assembly and modified as below inputs.conf:
[monitor://C:\Windows\assembly]
index=Assembly_monitor
sourcetype=Assembly
& also edited props.conf as :
[Assembly]
NO_BINARY_CHECK = true
-- Even also i am not getting any data 😞
Please help
... View more
02-19-2013
04:20 AM
[monitor://C:\Windows\assembly]
index=Assembly_monitor
the above stanza forwards no data into Splunk indexer.
i have set the source type as assembly and modified as below inputs.conf:
[monitor://C:\Windows\assembly]
index=Assembly_monitor
sourcetype=Assembly
and edited props.conf as :
[Assembly]
NO_BINARY_CHECK = true
-- Even also i am not getting any data 😞
Please help
... View more
02-18-2013
10:43 PM
I would like to monitor assembly folder in windows.
Path :- C: \Windows \assembly
I have set the inputs.conf in Universal forwarder as below:
[monitor://path]
disabled = 0
interval= 00
index = Assemby_monitor
fullEvent = true
I have received no data under the Assembly_monitor index .
Do i need to set any other properties ?
Please help
... View more
02-13-2013
07:45 AM
Need to monitor IIS Logs of remote windows Servers
I am using universal forwarders to bring data into Splunk
Please help in creating inputs.conf
... View more
02-13-2013
07:38 AM
1.I have configured inputs.conf to monitor c:\windows\assembly folder in windows Server
2.I am using [fschange = folder path] to monitor asseblies
3.I am getting into Splunk
4.But, i am getting data in the format of XML , no fields are deducted by Splunk automatic indexing
i have set source type to assembly
5.I need to view fields like version, date created , date modified, oldVersion, newVersion.
Do i need to configure anything other than this , to get proper data ?
Please help
... View more
- Tags:
- directory-monitor
02-12-2013
10:41 PM
Create 2 new roles. ADMIN & USER. Map users to roles accordingly.
1.Goto App->Manage apps->Select the app->View objects
2.Grant READ access to admin role for all the views
3.Same way,
Select particular views and grant READ access to User role.
When admin login to the application , all the views are visible
When User login , he could able view selected views.
--RESOLVED
... View more
02-11-2013
04:17 AM
1.I have created an application with only one View
2.I need to authenticate 2 users to this app.
• Admin - need to access with drilldown functionality
• User - Just to view the flash time results, but no drilldown feature.
Where and how can i implement this ?
... View more
02-11-2013
04:11 AM
1.Due to some reverse proxy issues I can’t create a new Role in Splunk Web UI.
2.I have created a new role via authorize.conf file.
3.I need to set a default application for this new role via config file.
Where do I set this? Which file i need to Edit?
Kindly please help
... View more
- Tags:
- roles
02-11-2013
04:04 AM
Yes. This is what i am doing , each time when i Change my account pw , i am manually editing in my LDAP too.
... View more
02-11-2013
02:57 AM
1.Created new LDAP strategy to authenticate a group of users from AD.
2.Configured the User Settings & Group Settings which works good
3.I have configured LDAP under my User account - and i set the Bind DN accordingly
4.I could able to authenticate my group users successfully
When i Change the password of my account, i am losing my LDAP settings. Do i need to configure with a user name whose password never expires? (or) Is there way to update my password in Splunk LDAP strategy automatically when it got Changed ?
Kindly provide a solution to this -
... View more
02-07-2013
01:52 AM
I created a new ROLE with No search capability
and Created a new user and assigned with the above ROLE .
Will this work? How can i RESTRICT the User from drilldown from a view ?
... View more
02-06-2013
05:39 AM
2013-02-06 14:36:43,891 ERROR [51125c6ba8803f908] report:18 - SimpleError status=400 message=PDF server is not enabled
******** this is error log i can found
... View more
02-06-2013
05:21 AM
I am getting an Error , when i try to create a new Role in Splunk Web:
ERROR DETAILS :
500 Internal Server Error
Return to Splunk home page
An error occurred while rendering the page template. See web_service.log for more details
This page was linked to from http://localhost:8000/enUS/manager/TestApp/accesscontrols.
Please help -
... View more
- Tags:
- roles
01-31-2013
03:29 AM
Instance of splunk is running already and it enters into a CLOSE_WAIT state.
So , we need to kill the previously existing Splunk instance in the TASK MANAGER.
Its working now.
... View more
01-30-2013
02:34 AM
For Splunk to run , do firewall service needs to be enabled ?
If i disable the firewall - Is splunk expected to work or not ?
... View more
- Tags:
- windows
01-30-2013
02:27 AM
Could not able to access Splunkweb.
ERROR : 503 Service unavailable
The splunkd daemon cannot be reached by splunkweb. Check that there are no blocked network ports or that splunkd is still running.
Splunkd , Splunkweb - Services are running fine. VERIFIED
How can i troubleshoot this issue ?
Please help
... View more
- Tags:
- splunkd
01-24-2013
04:26 AM
There is only one dashboard.
Two users are authenticated to it.
ADMIN need to see all the Panels in the dashboard.
User needs to view some panels in the dashboard remaining masked.
How to SET a permission like this ? Where can i edit the set up ?
... View more
- Tags:
- users
01-24-2013
04:24 AM
there is only one dashboard. Two users are authenticated to it. ADMIN user need to see all the Panels in the dashboard. User needs to view some panels in the dashboard remaining masked. How to SET a permission like this ? Where can i edit the set up ?
... View more
01-23-2013
07:24 AM
How can modify Navigation XML for an application - for ADMIN & User .
ADMIN - View all the dashboards
USER - View limited dashboards.
How can i implement this ? pls help.
any sample code . please post.
... View more
- Tags:
- configure
01-21-2013
05:11 AM
3 Karma
I created a bar chart of results using a saved search - I need to present the same bar chart view in my email alert.
Pls help.
... View more
- Tags:
01-19-2013
06:17 AM
1 Karma
If i upgrade my Splunk to new version , my early indexed data will be available by default ?
Or i need to restore my backup copy to new instance ?
... View more
- « Previous
- Next »
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
02-09-2023
05:35 AM
|
Karma given to
