Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About highsplunker
highsplunker
Contributor
Member since:
01-09-2018
10-18-2025
Community Statistics
| Posts | 131 |
| Solutions | 4 |
| Karma Given | 305 |
| Karma Received | 10 |
| Member Since | 01-09-2018 |
Activity Feed
- Karma Splunk Dashboard Studio Button to launch searches for Mux_Pl0uc. 10-16-2025 02:32 PM
- Karma replace one backslash by double backslash for ryastrebov. 10-17-2024 05:50 AM
- Karma Re: replace one backslash by double backslash for manan_amin. 10-17-2024 05:50 AM
- Posted Re: How to replace backslash by double backslash using eval in search and props.conf on Splunk Enterprise. 10-17-2024 05:47 AM
- Karma Re: How to replace backslash by double backslash using eval in search and props.conf for manan_amin. 10-17-2024 05:47 AM
- Karma How to replace backslash by double backslash using eval in search and props.conf for jay. 10-17-2024 05:46 AM
- Posted Re: How can I get list of users from rest api ? on Getting Data In. 10-14-2024 11:35 AM
- Karma Re: How can I get list of users from rest api ? for egid_la. 10-14-2024 11:33 AM
- Karma How can I get list of users from rest api ? for egid_la. 10-14-2024 11:18 AM
- Posted Re: How to filter on KV Store lookup time-based fields using a time picker? on Splunk Search. 10-04-2024 07:06 AM
- Karma Re: How to filter on KV Store lookup time-based fields using a time picker? for woodcock. 10-04-2024 07:06 AM
- Karma How to filter on KV Store lookup time-based fields using a time picker? for nawneel. 10-04-2024 07:05 AM
- Posted Re: Following the "Create a custom Splunk view" tutorial, but I receive "Failed to load resource: the ser on Dashboards & Visualizations. 10-03-2024 04:31 AM
- Karma Why the error "Failed to load resource: the server responded with a status of 404" when following the tutorial? for faustf. 10-03-2024 04:31 AM
- Karma Re: Following the "Create a custom Splunk view" tutorial, but I receive "Failed to load resource: the server responded with a status of 404" error. How to fix? for keweizhang123. 10-03-2024 04:31 AM
- Karma Re: Following the "Create a custom Splunk view" tutorial, but I receive "Failed to load resource: the ser for jramos123. 10-03-2024 04:31 AM
- Posted Re: Splunk button javascript unset token on Dashboards & Visualizations. 09-19-2024 03:11 PM
- Karma Splunk button javascript unset token- Is there a method to unset the splunk's token after the page refresh? for maurobissante. 09-19-2024 03:09 PM
- Karma Re: How to reference the search time range for somesoni2. 09-13-2024 08:14 AM
- Posted Re: How to set the timestamp when using the collect command? on Knowledge Management. 09-03-2024 08:08 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 1 |
08-18-2020
03:24 AM
Hello! Is it possible to receiver logs on multiple ports on HTTP Event Collector (Splunk HEC) ? Thanks in advance, Rashid
... View more
- Tags:
- hec
Labels
- Labels:
-
using Splunk Enterprise
07-08-2020
08:10 AM
Thanks a lot, Rich! But what with disaster recovery? I mean should that heavy forwarder be a "backuped" server? Or maybe a containerized thing?.. I this case a lot depends whether my Heavy FWR is alive... And regarding speed, if I manage to min recommended set up, is 5-15 seconds speed of replication accesseble?
... View more
07-08-2020
07:44 AM
1 Karma
Hey guys, I'm configuering indexer cluster, so I'm gonna have like this: sh1+sh2 ix1+ix2+ix3_master (indexer cluster) 1. How should I configure DB input from our Oracle DB to the indexer cluster? 2. And what speed of data replication will I have? Just in general. Some specifics: CentOS Linux, about 8 CPU and 16 Gb of RAM each ix node.
... View more
Labels
- Labels:
-
configuration
07-08-2020
07:39 AM
Guys, really no ideas?
... View more
07-06-2020
11:28 PM
Hey guys, I bought a Splunk Enterprise software several years ago with perpetual License. I'm wondering which License Agreement text do I need to follow? The one that was located on my server during the installation (/opt/splunk/) or the online version on Splunk web site?
... View more
- Tags:
- licence agreement
Labels
- Labels:
-
using Splunk Enterprise
06-24-2020
10:49 PM
no support - ok, I got it but no updates - that's kinda unfair...
... View more
06-24-2020
08:54 AM
hi, am i correct that the data is replicated (i.e. present on both indexers) and available for search on search heads, but not shown when search on them (indexers) ? i have not read yet the whole page, honestly...
... View more
06-24-2020
07:23 AM
thank you Rich, but i guess i don't have to pay annuals... i bought perpetual license for N gigabytes per day... no?
... View more
06-24-2020
06:31 AM
hey guys, am i guaranteed to get splunk software updates if i have a perpetual license? (bought several years ago) i don't quite follow, but i heard there were some changes in splunk's business model or smth thanks in advance, rashid
... View more
- Tags:
- license
Labels
- Labels:
-
using Splunk Enterprise
06-18-2020
10:55 PM
1 Karma
Hey guys, What do I need to get data in and output to TIBCO JMS? Python or Java? libs?.. I couldn't find any reasonable Python module to work with TIBCO queues in JMS protocol. Something is wrong with pyactivemq (conflict of versions). So I looked at Java SDK way to work with TIBCO.
... View more
Labels
- Labels:
-
development
05-20-2020
02:53 AM
Hi sarnagar!
Did you get something on the question?
I've faced the same question.
And even more: is it possible to push data back from Splunk to Kafka? (i.e. to another system via Kafka)
... View more
04-26-2020
05:28 AM
hi @Sukisen1981!
thanks for your comment!
i read the page you provided, and for some reason i cannot get the results -- not sure what's wrong
(sorry for the huge delay)
best wishes,
rashid
... View more
04-26-2020
04:47 AM
@nickhillscpl thanks a lot!
... View more
04-26-2020
04:34 AM
ok, thank you Giuseppe!
I'm not sure I understand my current needs fully, so I'm going to analyze carefully again.
thank you!
best wishes,
rashid
... View more
04-26-2020
04:15 AM
1 Karma
hi @gcusello !
thanks a lot! you're right!
(sorry for the delay!)
best wishes,
rashid
... View more
04-26-2020
04:13 AM
1 Karma
hi @waechtler_amasol !
thanks!
worked OK!
sorry for the delay! 🙂
best regards,
rashid
... View more
04-26-2020
04:10 AM
1 Karma
hi @jkat54 ,
you're probably right, my bad,
i will check my tickets once again!
cheers
rashid
... View more
04-19-2020
12:42 PM
hi Giuseppe! @gcusello !
thanks for quick an detailed response!
my question is, probably, with this:
Keep in mind that every search (and every sub-search) takes a **CPU* * - CPU where?
if it's a CPU on indexer server, then i probably need indxer cluster
if it's a CPU on search head server, then search head
am i correct?
best regards
Rashid
... View more
04-19-2020
11:03 AM
he guys! i have 6 linux servers. i'm trying to understand what is needed to speedup searching: indexer cluster or search head cluster?
... View more
Labels
04-19-2020
10:30 AM
1 Karma
hello. guys i don't understand. in order to change splunk admin pwd i need to know splunk admin pwd ? i don't get it...
... View more
04-15-2020
02:27 PM
sorry, i meant this
curl -k -u admin https://localhost:8089/services/search/jobs/export -d search= "| makeresults | eval amount=1001, score=777 "
<-- this does not work...
I'm playing with Google's GCP, temporarily installed a "little" Splunk version there. And something is wrong with the access point. It perfectly worked at my job.
... View more
04-15-2020
02:01 PM
it works fine! thanks!
could you tell please why this does not work
curl -ku admin http://myserver:8089/services/search/jobs/export -d search= "| makeresults | eval amount=1001, score=777 "
?
... View more
04-15-2020
01:59 PM
thanks a lot, helped me!
question: why this search does not work
curl -ku admin
http://myserver:8089/services/search/jobs/export
-d search= "| makeresults | eval amount=1001, score=777 "
?
... View more
04-15-2020
12:48 PM
i too could not access my splunk wer from home browser, but my problem was precisely in GCP firewall rules: be careful with you filters (labes, masks, etc.) - there is not difficulty there, actually. have a nice day.
... View more
04-06-2020
09:56 AM
Thanks for your quick response!
Ok, so are satisfied with the App? Reliable? Bugs, issues?
What's the format of files where your ELK instance resides?
Plain files? Log/CSV/txt...
I'm just wondering, why do I need this connector if I can install Splunk Forwarder on my ELK server... Advantages of FW: online input, strong reliability, flexible filtering. Advantages of the Connector: no installation.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
10-18-2025
08:23 AM
|
