Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- About sekhar463
sekhar463
Path Finder
Member since:
03-29-2022
04-16-2024
Community Statistics
| Posts | 202 |
| Solutions | 0 |
| Karma Given | 14 |
| Karma Received | 0 |
| Member Since | 03-29-2022 |
Activity Feed
- Posted Splunk HF to splunk cloud Outputs.conf file on Splunk Cloud Platform. 04-16-2024 02:47 AM
- Posted Re: Windows log file data is not coming on Getting Data In. 01-19-2024 06:07 AM
- Posted Windows log file data is not coming on Getting Data In. 01-19-2024 01:56 AM
- Posted Re: Need help on json data on Getting Data In. 12-20-2023 04:58 AM
- Posted Data is not ingesting into splunk from UF on Getting Data In. 12-20-2023 01:13 AM
- Posted Need help on json data on Getting Data In. 12-20-2023 01:09 AM
- Posted Re: Join 2 searches to enrich data from other index on Getting Data In. 11-15-2023 07:03 AM
- Posted Join 2 searches to enrich data from other index on Getting Data In. 11-15-2023 02:08 AM
- Posted Re: Join data from 2 indexes on Splunk Search. 11-14-2023 03:49 AM
- Posted Re: Join data from 2 indexes on Splunk Search. 11-09-2023 02:04 AM
- Posted Join data from 2 indexes on Splunk Search. 11-06-2023 07:50 AM
- Posted Re: Need help on splunk search to get process status when stopped by using PID on Splunk Search. 10-23-2023 05:45 AM
- Posted Re: Need help on splunk search to get process status when stopped by using PID on Splunk Search. 10-20-2023 03:24 AM
- Posted Need help on splunk search to get process status when stopped by using PID on Splunk Search. 10-20-2023 12:03 AM
- Tagged How to get Apps installed in HF using splunk? on Splunk Cloud Platform. 10-19-2023 05:39 AM
- Posted Re: How to join 2 splunk searches to filter data on Splunk Search. 10-19-2023 05:37 AM
- Posted Re: How to monitor application services on Getting Data In. 10-18-2023 03:59 AM
- Posted How to monitor application services on Getting Data In. 10-17-2023 05:56 AM
- Posted Re: How to join 2 splunk searches to filter data on Splunk Search. 08-28-2023 07:47 AM
- Posted Re: How to join 2 splunk searches to filter data on Splunk Search. 08-28-2023 06:51 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
02-27-2023
12:06 AM
yes i did the same and i have given below regex. but still not reflecting in the search data
... View more
02-26-2023
10:27 PM
Thank you its working manually. how to add automatically for a source type. i have added the regex in the field extractor but not getting field populated while searching with the sourcetype
... View more
02-24-2023
06:39 AM
hi all, how to extract this message bgp_connect_start: connect 2403:df40:0:16::3 (Internal AS 14630) (instance master): No route to host as new fields as BGP connection fields BGP_CONNECT_FAILED: bgp_connect_start: connect 2403:df40:0:16::3 (Internal AS 14630) (instance master): No route to host
... View more
Labels
- Labels:
-
field extraction
02-16-2023
02:47 AM
we have juniper logs are received as syslogs so which dashboard i can use them
... View more
02-16-2023
01:37 AM
this app not there in splunkbase
... View more
02-16-2023
01:20 AM
we have ingested junipet logs as syslogs. trying to create some dashboard for network team Need some dashboard templates for juniper devices log data
... View more
Labels
- Labels:
-
dashboard
02-15-2023
05:13 AM
where is it while doing inputs.conf file or in the device end while configuring to send syslogs
... View more
02-15-2023
04:12 AM
okay so we can disable syslog input and once installed need to create new inputs in TA ADDON right
... View more
02-15-2023
02:59 AM
yes we have multiple HF "s getting syslogs to splunk cloud for juniper. so how we can install ADDON and we need to disable syslog inputs
... View more
02-15-2023
01:55 AM
we already configured the inputs for syslogs but if we configured again for the input using ADDON is it leads duplicate logs and if we install TA in HF what is the config we need to do for extraction does it required inputs or props
... View more
02-15-2023
01:27 AM
Thanks. once installed any config need to do ? will it automatically take
... View more
02-15-2023
01:19 AM
hai team,
we are using splunk cloud and one prem HF
we are getting juniper logs as syslogs and we are using Splunk_TA_juniper in splunk cloud
how to do field attraction from my end
... View more
Labels
- Labels:
-
field extraction
02-15-2023
12:05 AM
nothing as such as mentioned points one more ex events .see same log 2/15/23 1:13:13.000 PM "#includedir", host = usoraosfclt100source = /etc/insights-client/.cache.jsonsourcetype = unknown-3 2/15/23 1:13:13.000 PM "#includedir", host = usoraosfclt100source = /etc/insights-client/.cache.jsonsourcetype = unknown-3 2/15/23 1:09:21.000 PM "#includedir", host = usoraosfclt100source = /etc/insights-client/.cache.jsonsourcetype = unknown-3 2/15/23 1:09:21.000 PM "#includedir", host = usoraosfclt100source = /etc/insights-client/.cache.jsonsourcetype = unknown-3
... View more
02-14-2023
03:16 AM
can crcsalr resolve this if yes what is the syntax to add where should i add this
... View more
02-14-2023
02:22 AM
i can see only one input for this logs source /opt/splunk/etc/apps/Splunk_TA_nix/local/inputs.conf index = ivz_unix_linux_events /opt/splunk/etc/apps/Splunk_TA_nix/local/inputs.conf [monitor:///var/log] /opt/splunk/etc/apps/Splunk_TA_nix/local/inputs.conf disabled = false
... View more
02-14-2023
01:09 AM
can you tell how can i check this
... View more
02-14-2023
12:43 AM
Hi All,
Good day, we are getting Duplicate logs in Splunk for multiple sources with same event example below
how to avoid duplicate logs
index=ivz_unix_linux_events _raw="[34m[2023-02-14 02:22:01.363] [TRACE] shiny-server - [39mUploading metrics data..."
2/14/23 1:52:01.363 PM [34m[2023-02-14 02:22:01.363] [TRACE] shiny-server - [39mUploading metrics data... host = usapprstdld101source = /var/log/shiny-server.logsourcetype = shiny-server 2/14/23 1:52:01.363 PM [34m[2023-02-14 02:22:01.363] [TRACE] shiny-server - [39mUploading metrics data... host = usapprstdld101source = /var/log/shiny-server.logsourcetype = shiny-server
... View more
Labels
- Labels:
-
props.conf
-
transforms.conf
02-10-2023
03:43 AM
what is this search will give. if any searches to get juniper interfaces down like juniper routing neighbor down
... View more
02-10-2023
02:25 AM
Hi All,
Good day, I have juniper data in Splunk using sourcetype = juniper*
but need some searches to create dashboards which are useful for juniper team to check if any down or outage
could you please tell me any searches for this juniper dashboard
... View more
- Tags:
- search
02-08-2023
03:19 AM
yes receiving internal logs as well but didnt get the logs from the file.
... View more
02-07-2023
03:04 AM
nothing was there yes the file in /opt/splunk/etc/deployment-apps/splunk_netapp_agentlog/local/inputs.conf file
... View more
02-07-2023
02:38 AM
#cat inputs.conf [monitor:///harvest/netapp/cloudsecure/agent-logs/*.log] index = ivz_unix_linux_events sourcetype = netapp:cloudsecure:agentlog disabled = 0
... View more
02-07-2023
02:37 AM
[monitor:///harvest/netapp/cloudsecure/agent-logs/*.log] index = ivz_unix_linux_events sourcetype = netapp:cloudsecure:agentlog disabled = 0
... View more
