Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About kiranhar
kiranhar
Explorer
Member since:
04-26-2018
01-06-2023
Community Statistics
| Posts | 16 |
| Solutions | 0 |
| Karma Given | 2 |
| Karma Received | 0 |
| Member Since | 04-26-2018 |
Activity Feed
- Posted Re: how to resolve kvstore failed on indexer? on Knowledge Management. 01-09-2023 07:49 PM
- Karma Re: how to resolve kvstore failed on indexer? for richgalloway. 01-09-2023 07:46 PM
- Karma Re: how to resolve kvstore failed on indexer? for richgalloway. 01-09-2023 07:46 PM
- Posted Re: how to resolve kvstore failed on indexer? on Knowledge Management. 01-08-2023 08:01 PM
- Posted How to resolve kvstore failed on indexer? on Knowledge Management. 01-05-2023 08:34 PM
- Posted Re: Splunk SH Migration from Cent OS to REDHAT from one VM to another VM on Getting Data In. 10-25-2022 02:46 AM
- Posted Re: Splunk SH Migration from Cent OS to REDHAT from one VM to another VM on Getting Data In. 10-24-2022 01:44 AM
- Posted Re: Splunk SH Migration from Cent OS to REDHAT from one VM to another VM on Getting Data In. 10-24-2022 01:26 AM
- Posted What are the steps for a Splunk SH Migration from Cent OS to REDHAT from one VM to another VM? on Getting Data In. 10-24-2022 12:38 AM
- Posted Re: cannot find saved alert in enterprise security app on Splunk Enterprise Security. 11-01-2019 02:09 AM
- Posted Re: cannot find saved alert in enterprise security app on Splunk Enterprise Security. 11-01-2019 02:01 AM
- Posted cannot find saved alert in enterprise security app on Splunk Enterprise Security. 10-31-2019 11:56 PM
- Tagged cannot find saved alert in enterprise security app on Splunk Enterprise Security. 10-31-2019 11:56 PM
- Posted Re: How to Splunk getting data from windows servers on Splunk Enterprise Security. 10-31-2019 08:42 AM
- Posted How to Splunk getting data from windows servers on Splunk Enterprise Security. 10-31-2019 05:05 AM
- Tagged How to Splunk getting data from windows servers on Splunk Enterprise Security. 10-31-2019 05:05 AM
- Tagged How to Splunk getting data from windows servers on Splunk Enterprise Security. 10-31-2019 05:05 AM
- Posted Re: splunk add-on installation on deployment server- commands/installation setups on linxes server CLI commands on Splunk Enterprise Security. 10-28-2019 09:00 PM
- Posted Re: splunk add-on installation on deployment server- commands/installation setups on linxes server CLI commands on Splunk Enterprise Security. 10-26-2019 10:48 PM
- Posted splunk add-on installation on deployment server- commands/installation setups on linxes server CLI commands on Splunk Enterprise Security. 10-25-2019 11:36 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
01-09-2023
07:49 PM
Thanks for your response. So, shall I disable from the default dir or local dir ? please advise.
... View more
01-08-2023
08:01 PM
in default server.conf it is enabled, but you are saying by default it should be disabled, then why default conf file it is enabled ?
... View more
01-05-2023
08:34 PM
Hello folks, Need your help.
Here is the splunkd.log file with grep kvstore. Please review and advise what went wrong and what needs to be done to fix this issue.
... View more
Labels
- Labels:
-
kvstore
10-25-2022
02:46 AM
Hi Thanks for your response. We wanted to keep the old setup until we migrate Splunk to the new VM. So, we have a new VM with new IP and new Hostname, later will change the IP and Host Name on the new Server as old one. Please advise on the steps for this scenario. Awaiting your response.
... View more
10-24-2022
01:44 AM
Thanks. Also, please advise, on how to create a Splunk user and Splunk group on the new Linux Server (Redhat). Please provide the steps.
... View more
10-24-2022
01:26 AM
Hi, Thanks for your respons. No, it is the same IP and Host to maintain on the new VM.
... View more
10-24-2022
12:38 AM
Team,
I need your assistance with the below task.
I need to migrate Splunk sh-2 (Non ES instance) from Cent OS to REDHAT from one VM to another VM.
I would appreciate it if you can provide step by step guide for this migration.
Note: We need to maintain the same IP address / Host Name of the existing VM ( Splunk Server).
... View more
Labels
- Labels:
-
other
11-01-2019
02:09 AM
Thanks a lot, I found them.
... View more
11-01-2019
02:01 AM
no thats I already tried, i cannot find there. I have checked in following tabs in Search & Reporting ...alerts ..."all" "your" and This App's".
... View more
10-31-2019
11:56 PM
I have saved a search query as an alert on enterprise security app, but i cannot find them in alerts tab ( search & reporting) , aslo I checked under content management tab, and I cannot find there also. so, please some one help me where do i find those alerts in enterprise security ? as I need to delete them as I created as a real time alert and i m getting continues emails.
... View more
10-31-2019
08:42 AM
We don’t required these serve to forward the logs to Splunk ... my confirmation is working Splunk stop collecting the logs after making them blacklist but it some time to initiate configuration I believe...
... View more
10-31-2019
05:05 AM
Hello,
I want to blacklist the first four host to stop getting data from these servers, I have blacklisted them in the serverclass.conf, but still I am getting data on Splunk search head. please advise what is right way to block/stop the data to splunk, please note i dont want to unstall/stop splunk universal forwards in the server ( remote shost)
[serverClass:ZU_All_windows_OS_member_servers_except_Exchange_servers]
blacklist.42 = WC-EMPSHARE
blacklist.43 = WC-STUSHARE
blacklist.45 = DC-EMPSHARE
blacklist.46 = DC-STUSHARE
whitelist.0 = SUHRODC02
whitelist.1 = MDPROD
whitelist.10 = KIWIK
whitelist.11 = WC-DXBADM-04
whitelist.12 = AEBFAPN01
whitelist.13 = GC-ADSS
whitelist.14 = GK-WEBFAPN02
whitelist.15 = MK-AUHADS2
whitelist.16 = LK-ZTEJ
whitelist.17 = DK-CSDXB07
whitelist.18 = LLBBZU
... View more
10-28-2019
09:00 PM
Done. Thanks
... View more
10-26-2019
10:48 PM
Thanks. The search head is not in a cluster. However, I have followed the process suggested by woodcock and my installation goes smooth. I have verified on Splunk relevant instances after that and Splunk add-on is updated everywhere.
... View more
10-25-2019
11:36 PM
I need to install an updated app on the deployment server, please provide me the steps/commands to install the add-on ( updated app) on the deployment server and then push to other Splunk instances. I am getting the following error when I try to install the updated app on search head directly,
There was an error processing the upload.app=Splunk_TA_juniper is already managed via deployment client; it may not be overridden via search head cluster deployer, UI, CLI, or REST API; remove existing app=Splunk_TA_juniper via deployment server if you wish to install it via any of these other mechanisms
... View more
04-26-2018
04:32 AM
We deploying Splunk enterprise security ( SIEM) solution) and it is in the final implementation stage. does anyone have user acceptance test use cases to check the implementation whether done as per the best practices and required correlation are configured and they are working?
So I wanted to check including system, performance, implementation, use cases, correlations, alerts, search engine and other if anything important to test and confirm that the vendor has successfully implemented the Splunk.
Please help.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
01-06-2023
02:25 AM
|
