Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About khanlarloo
khanlarloo
Explorer
Member since:
06-02-2017
05-18-2022
Community Statistics
| Posts | 119 |
| Solutions | 1 |
| Karma Given | 3 |
| Karma Received | 0 |
| Member Since | 06-02-2017 |
Activity Feed
- Posted Re: Route and filter data on Getting Data In. 05-17-2022 10:00 PM
- Posted Re: Route and filter data on Getting Data In. 04-11-2022 12:58 AM
- Posted Re: Route and filter data on Getting Data In. 04-11-2022 12:37 AM
- Posted Re: Route and filter data on Getting Data In. 04-10-2022 10:30 PM
- Posted Re: Route and filter data on Getting Data In. 04-03-2022 03:28 AM
- Posted Is it possible to filter specific field values in indexers without HeavyForwarder in indexer cluster ? on Getting Data In. 04-03-2022 01:17 AM
- Posted Re: two search result at the same time on Splunk Search. 01-31-2022 03:15 AM
- Posted Re: two search result at the same time on Splunk Search. 01-31-2022 03:09 AM
- Posted two search result at the same time on Splunk Search. 01-31-2022 02:48 AM
- Posted hidden user in users on Security. 09-26-2021 02:18 AM
- Posted Re: data model field extraction on Splunk Enterprise. 07-31-2021 05:33 AM
- Posted data model field extraction on Splunk Enterprise. 07-20-2021 01:49 AM
- Karma Re: How can I index Netflow logs? for nickhills. 06-05-2020 12:49 AM
- Karma Re: add icon to app for niketn. 06-05-2020 12:49 AM
- Karma Re: Can we use regex for counting fields? for 493669. 06-05-2020 12:49 AM
- Posted Re: extract json files fields on Splunk Search. 05-26-2020 11:54 PM
- Posted Re: extract json files fields on Splunk Search. 05-19-2020 08:10 PM
- Posted Re: extract json files fields on Splunk Search. 05-19-2020 08:06 PM
- Posted Re: extract json files fields on Splunk Search. 05-19-2020 03:38 AM
- Posted Re: Different sourcetype with one hostname on Getting Data In. 05-19-2020 01:04 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
06-12-2018
11:07 PM
hi
i have one problem,my splunk instance shows this messege in monitoring console -- > health check
Saturation of event-processing queues ------
One or more of the indexer queues on this instance is reporting an averaged fill percentage of 90 or more over the last 15 minutes. This might affect how quickly this instance indexes events.
can you tell me how can i solve my problem?
... View more
- Tags:
- splunk-enterprise
05-19-2018
03:58 AM
hi
i have tow devices, i want to check the result of the same event in tow devices.
for example if one source is blocked in one device on another device what is the action!
Device A = fw=x.x.x.x msg=""Connection Closed" " appName=""General HTTP"" n=366680949 src=150.X.X.55:34884:X1 dst=192.168.x.x:80:X2
Device B = risk=None, event=""Other"", proxy=""://generic:"",, source=""150.X.X.55"", violation=""Invalid hostname"", path=""/"",
method=""GET"", node=""WebApplicationFirewall"", action=""Block""
in device A the ip is connection closed and on the device b the ip is blocked
tanx
... View more
- Tags:
- splunk-enterprise
05-09-2018
01:13 AM
can anyone tell me how to config f5 ltm pool monitoring ?
in installed this app but i didn't receive any data from my LTM?
is this need any pre-requesting app ?
... View more
- Tags:
- splunk-enterprise
12-12-2017
09:12 PM
tanx for helping me.i change the submitButton="true" and searchWhenChanged="false" now it works.
... View more
12-12-2017
02:21 AM
No i check every thing and it's correct but it dosen't show my result.
When i use link switching it's working.but in tab it is not working.
... View more
12-09-2017
05:17 AM
hi i create tab in my dashbord base on this Link :https://www.splunk.com/blog/2015/03/30/making-a-dashboard-with-tabs-and-searches-that-run-when-clicked.html but at the end it does't show my search,here is the screenshot of my dashboard;
... View more
- Tags:
- splunk-enterprise
Labels
- Labels:
-
CSS
-
javascript
12-04-2017
03:00 AM
should i install netflow programm to collect my data and then send them to splunk?
... View more
12-04-2017
01:41 AM
Hi,
I want to send my router's Netflow logs to Splunk.
How can I do that?
I installed Splunk in Linux Centos 7 and installed the Splunk Add-on for NetFlow, but my logs still don't show in Splunk.
... View more
11-28-2017
10:26 PM
i'm using automatic lookup and i get the field in fields side bar. but when i want to use basic search like stats it doesn't show me the exact result.
It shows me duplicat result
... View more
11-28-2017
04:39 AM
My lookup file
IOSVersion,Vulnerability,Risk,Refrence
12.2(55)SE10,Cisco IOS and IOS XE Software DHCP Remote Code,Critical,
12.2(55)SE10,Cisco IOS Software for Cisco Industrial Ethernet Switches,High,
12.2(55)SE10,Multiple Cisco Products Manipulation Vulnerability,Medium,
12.2(55)SE10,SNMP Remote Code Execution Vulnerabilities in Ci,High,
My Csv file
Hostname,IOSVersion,IPAddress,index,source,sourcetype,splunk_server
Gaandi(2nd-Floor),12.2(55)SE10,,main,Network Switch.csv,csv,LAPTOP-IRG241OV
Gaandi(3rd-Floor),12.2(55)SE10,,main,Network Switch.csv,csv,LAPTOP-IRG241OV
Dispatching,12.2(55)SE10,,main,Network Switch.csv,csv,LAPTOP-IRG241OV
... View more
11-28-2017
01:19 AM
when i search in my csv file for exam i want to know the number of my vulnerability the number is 10 but when i do this in splunk it shows me more than 10
... View more
11-28-2017
12:58 AM
yes.i can see them in right pannel.but when i search them it shows different result.not showing the exact number
sourcetype=csv | stats count by Vulnerability Risk Refrence
... View more
11-28-2017
12:49 AM
i add a csv file named net.csv my lookup csv file is ios.csv
no there are no duplivate value
... View more
11-27-2017
11:58 PM
Hi,
I have a problem when searching my lookup field. I added a lookup file to my search with 3 fields (Vulnerability, Risk, Reference). But when I'm searching with stats command or something else it shows me a different result.
Are there any solutions?
... View more
11-12-2017
01:57 AM
yes my issue was static path i put my icon in appserver/statis path instead of stati path.
... View more
11-11-2017
03:32 AM
hi i have problem to add icon to my app,i put it in path C:\Program Files\Splunk\etc\apps\WAF\appserver\static but it doesn't show my app icon any more
... View more
- Tags:
- splunk-enterprise
Labels
- Labels:
-
development
-
other
- « Previous
- Next »
