hi, i have three table sin my dashborard, each showing different spacing between their columns, i want them all in same line very neatly. how can i do this? fed up with changing css. somebody please help!!!!!!!!! thank you ... View more

Hi, scenario: a log uploader application helps in uploading logs to a directory. let it be splunkdata/timeofupload/yourid/splogs/filename. regex used to monitor files are like /splunkdata/.../.../...splogs/* doubt1: will a file with different id but same filename can be indexed in splunk? doubt2: will a file with same filename but different content and is can be indexed in splunk? doubt3: will a file with same id same filename but different content can be indexed? What settings do i have to change to get these features.. please help ... View more

hi, i had 2 splunk instance in one VM, when i tried to upgrade one of the version with ports 9000 and 7089, the other instance which was using the splunk default ports is not turning up. there isn't any option to start the server, in home folder i could see only etc infa share var these folders, bin folder is not seen please help did i do anything wrong while upgrading?? i used .rpm fle to upgrade and the command used was rpm -U --prefix=/opt/splunknewuser splunk-5.0.2-149561-linux-2.6-x86_64.rpm because already there was an instance of splunk in /opt/splunk i know that some more info is needed to solve this, but i don't know, what info i have to provide, please ask fpr further explanation specifically.. after i tried copying bin,lib and etc folers from a backup file i got this following error Splunk> Take the sh out of IT. Checking prerequisites... Checking http port [8000]: open Checking mgmt port [8089]: open Checking configuration... Done. Checking index directory... Done. Checking databases... Validated databases: _audit, _blocksignature, _internal, _thefishbucket, history, infa, main, sample, splunklabs, summary An unforeseen error occurred: Exception: <type 'exceptions.OSError'>, Value: [Errno 13] Permission denied Traceback (most recent call last): File "/opt/splunk/lib/python2.6/site-packages/splunk/clilib/cli.py", line 1082, in main parseAndRun(argsList) File "/opt/splunk/lib/python2.6/site-packages/splunk/clilib/cli.py", line 940, in parseAndRun retVal = cList.getCmd(command, subCmd).call(argList, fromCLI = True) File "/opt/splunk/lib/python2.6/site-packages/splunk/clilib/cli.py", line 264, in call return self.func(args, fromCLI) File "/opt/splunk/lib/python2.6/site-packages/splunk/clilib/control_api.py", line 33, in wrapperFunc return func(dictCopy, fromCLI) File "/opt/splunk/lib/python2.6/site-packages/splunk/clilib/_internal.py", line 234, in preFlightChecks checkSearchthing() File "/opt/splunk/lib/python2.6/site-packages/splunk/clilib/_internal.py", line 291, in checkSearchthing retCode = comm.runAndLog(["locktest"], logStdout = False) File "/opt/splunk/lib/python2.6/site-packages/splunk/clilib/cli_common.py", line 1151, in runAndLog proc = subprocess.Popen(cmdList, stdout=subprocess.PIPE, stderr=subprocess.PIPE) File "/opt/splunk/lib/python2.6/subprocess.py", line 621, in __init__ errread, errwrite) File "/opt/splunk/lib/python2.6/subprocess.py", line 1126, in _execute_child raise child_exception OSError: [Errno 13] Permission denied Please file a case online at http://www.splunk.com/page/submit_issue ... View more

Hi, i have a table displaying log messages alone and their timestamp is same as they have only micro milliseconds difference in their occurrence, in the table the lo details are sorted according to the alphabetic order of the log details, i want it as it is in the log file.. How can i do this? Please help Thank you ... View more