Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- About p_gurav
p_gurav
Champion
Member since:
09-17-2014
07-27-2020
Community Statistics
| Posts | 970 |
| Solutions | 63 |
| Karma Given | 12 |
| Karma Received | 148 |
| Member Since | 09-17-2014 |
Activity Feed
- Got Karma for Re: AutoLB Volume. 04-07-2025 10:51 AM
- Got Karma for Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?. 02-25-2024 04:25 AM
- Got Karma for Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?. 01-05-2024 12:57 PM
- Got Karma for Re: Search peer indexer1 has the following message: License Manager: Failed to contact license master: reason='Unable to connect to license master:. 07-31-2023 06:22 AM
- Got Karma for Re: How to forcefully change the current search head captain to actual captain in the search head cluster Environment ?. 07-12-2023 02:24 PM
- Got Karma for Re: round in addcoltotals. 02-10-2023 12:04 PM
- Got Karma for Re: How to forcefully change the current search head captain to actual captain in the search head cluster Environment ?. 10-10-2022 01:46 AM
- Got Karma for How to split a json array into multiple events with separate timestamps?. 09-21-2022 02:16 AM
- Got Karma for Re: splunk dbconnect how to obtain a list of all database connections. 09-02-2022 09:56 AM
- Got Karma for Re: splunk dbconnect how to obtain a list of all database connections. 06-08-2022 08:39 AM
- Got Karma for Re: How do I disable the auto refresh delay on all dashboards?. 02-01-2022 01:51 AM
- Got Karma for Splunk false alerts. 10-25-2021 08:26 AM
- Got Karma for Re: Splunk upgrade from 7.x to 8.x. 09-13-2021 03:15 AM
- Got Karma for Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?. 09-10-2021 03:03 AM
- Got Karma for Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?. 08-19-2021 01:44 PM
- Got Karma for Re: datamodel command for multilevel data model child datasets. 12-04-2020 11:57 PM
- Got Karma for Re: datamodel command for multilevel data model child datasets. 12-04-2020 11:56 PM
- Got Karma for Re: Splunk Enterprise not working. 11-02-2020 05:47 AM
- Got Karma for Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?. 11-02-2020 04:08 AM
- Got Karma for Re: Summary Indexing give duplicated records. 08-05-2020 01:48 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 4 | |||
| 5 | |||
| 0 | |||
| 2 |
04-04-2018
08:59 AM
Below are the steps to upgrade:
upgrade Splunk Enterprise to a compatible version. Refer:
http://docs.splunk.com/Documentation/Splunk/7.0.3/Installation/HowtoupgradeSplunk
Also for distributed environment refer: http://docs.splunk.com/Documentation/Splunk/7.0.3/Installation/UpgradeyourdistributedSplunkEnterpriseenvironment
Upgrade Splunk Enterprise Security. Refer: http://docs.splunk.com/Documentation/ES/5.0.0/Install/Upgradetonewerversion
Review, upgrade, and deploy add-ons.
Also, read docs carefully before upgrading. 🙂
... View more
04-04-2018
08:47 AM
According to doc it is disabled by default. In your environment those log may enabled for troubleshooting purpose. But yes you can disable it.
... View more
04-04-2018
08:12 AM
did you check to search and reports in setting?
... View more
04-04-2018
06:12 AM
Do you want to create new lookup or use existing in query?
... View more
04-04-2018
05:30 AM
Refer below doc and try to place lookup at specified position:
https://docs.splunk.com/Documentation/AddOns/released/ServiceNow/Lookups
... View more
04-04-2018
05:26 AM
This may help:
https://answers.splunk.com/answers/296089/can-we-save-a-search-as-an-alert-via-email-with-a.html
... View more
04-04-2018
05:04 AM
Can you check,:
The introspection generator add-on iin the forwarder's $SPLUNK_HOME/etc/apps/introspection_generator_addon/local/app.conf,
[install]
state = enabled
You can disable it if you don't want this data.
Refer doc:
http://docs.splunk.com/Documentation/Splunk/7.0.3/Troubleshooting/Whatdatagetslogged
... View more
04-04-2018
03:16 AM
1 Karma
Do you need something like this:
https://answers.splunk.com/answers/582253/replacing-no-results-found-with-0.html
... View more
04-04-2018
03:09 AM
2 Karma
You can try :
index=<your index> | eventstats count as totalcount | chart count,first(totalcount) as totalcount by status | eval percentage=round(count/totalcount*100) | where percentage > 10
... View more
04-04-2018
02:12 AM
can you try :
| stats count AS abc_count by ABC | fillnull abc_count value=0
... View more
04-04-2018
01:34 AM
Is your "manager" role has export_results_is_visible capability?
... View more
04-03-2018
11:44 PM
This may help you:
https://answers.splunk.com/answers/567087/how-to-split-data-into-separate-sourcetypes-with-t.html
... View more
04-03-2018
11:04 PM
Check if the user you are using to install the splunk has right permissions on the folders
/opt/splunk/etc/openldap/ldap.conf.default
Which user you are using? and can you list the directory permissions on the splunk installation directory (from base)?
... View more
04-03-2018
10:41 PM
is your dashboard in simple XML?
... View more
04-03-2018
10:14 PM
Can you check all topology related saved searches are enabled and returning data?
... View more
04-03-2018
09:59 PM
1 Karma
You can tag @jkat54 for support.
... View more
04-03-2018
09:48 PM
Can you give inputs.conf file details which you configured?
... View more
04-03-2018
06:16 AM
1 Karma
Can you try putting source in double quotes:
C:\Program Files\SplunkUniversalForwarder\bin>splunk add monitor "C:\Program Files\Atlassian\Application Data\JIRA\log"
... View more
04-03-2018
06:02 AM
Can you try:
C:\Program Files\SplunkUniversalForwarder\bin>splunk add monitor C:\Program Files\Atlassian\Application Data\JIRA\log
Also try using tab for auto selecting source name including space.
... View more
04-02-2018
08:59 PM
As the app relies heavily on data model accelerations you will not see anything in any dashboards (except the "Real-Time" ones) until this acceleration has completed. Initially this could take a while. There is a "Data Model Audit" dashboard that will tell you if the acceleration is complete or not.
... View more
04-02-2018
08:54 PM
its 1514 or 514?
... View more
04-02-2018
04:12 AM
1 Karma
Did you follow steps given in document:
https://docs.splunk.com/Documentation/AddOns/released/MSCloudServices/Configurecertificate
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
07-27-2020
02:54 AM
|
Karma given to
