About fizwit

fizwit · ‎05-31-2013

What is the best way to add a custom dashboard to the VMware App? Should I just edit $SPLUNK_HOME/etc/apps/vmware/local/data/ui/nav ?

fizwit · ‎05-24-2013

problem solved: modify: $SPLUNK_HOME/etc/apps/unix/local/inputs.conf [monitor:///home/.../.bash_history] disabled = 1 Splunk app for *NIX was spending all its time stating files in /home. (30% CPU) removing /home from monitor solved the problem.

fizwit · ‎05-22-2013

Thanks, that worked perfectly!

fizwit · ‎05-22-2013

Why can't I make a graph by field value directly? This works: index=logs Error_Type="WARN" | timechart count(Error_Type) This does not index=logs | timechart count(Error_Type="WARN") I would like to to this graph two types of error on the same pannel index=logs | timechart count(Error_Type="WARN"), count(Error_Type="ERROR")

fizwit · ‎05-21-2013

Using the Splunk App for *nix on Solair. splunkd has a very high load average. In 15 seconds it did an lstat of 6659 files. Not sure why so many files are being monitored.

Posts	5
Solutions	0
Karma Given	0
Karma Received	2
Member Since	‎11-12-2012

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

VMware App adding customer dashboard

Graph by field value not by field count

Solaris *nix Splunkd high load average

VMware App adding customer dashboard

Re: Solaris *nix Splunkd high load average

Re: Graph by field value not by field count

Graph by field value not by field count

Solaris *nix Splunkd high load average