Hi Sunrej, I am getting the following error in SDK 1.5.0 Did you also get it? Or do you know how to resolve it? I have changed https to http in .splunkrc file. And I am using JRE7 java.lang.RuntimeException: Connection reset at com.splunk.HttpService.send(HttpService.java:427) at com.splunk.Service.send(Service.java:1293) at com.splunk.HttpService.post(HttpService.java:308) at com.splunk.Service.login(Service.java:1122) at com.splunk.Service.login(Service.java:1101) at com.splunk.Service.connect(Service.java:187) at com.splunk.examples.search.Program.run(Unknown Source) at com.splunk.examples.search.Program.main(Unknown Source) Caused by: java.net.SocketException: Connection reset at java.net.SocketInputStream.read(SocketInputStream.java:196) at java.net.SocketInputStream.read(SocketInputStream.java:122) at java.io.BufferedInputStream.fill(BufferedInputStream.java:235) at java.io.BufferedInputStream.read1(BufferedInputStream.java:275) at java.io.BufferedInputStream.read(BufferedInputStream.java:334) at sun.net.www.http.HttpClient.parseHTTPHeader(HttpClient.java:690) at sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:633) at sun.net.www.http.HttpClient.parseHTTP(HttpClient.java:661) at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1324) at java.net.HttpURLConnection.getResponseCode(HttpURLConnection.java:468) at com.splunk.HttpService.send(HttpService.java:425) ... 7 more ... View more

If clustering is enabled, we can use /opt/splunk/bin/splunk apply cluster-bundle after adjusting indexes.conf. ... View more

hi in my splunk sonic firewall log the source address with source port in single header so how to do parse . (Example. src:192.168.1.2:5545:XA1) I WANT( SOURCE ADDRESS=192.168.1.2 SOURCE PORT 5545 OTHER XA1) kindly suggest how to do ..? ... View more

Hi, I have increased the maxcount value to 5000000 but still I am getting the error "Metadata results may be incomplete: 5000000 entries have been received from all peers (see parameter maxcount under the [metadata] stanza in limits.conf), and this search will not return metadata information for any more entries. (sid=rt_1427108700.117555)" Please suggest a permanent fix for this issue. Thanks Surekha ... View more

On Windows systems it's normal not to find splunkd_stderr.log, as Windows Services don't have a stderr at all. So this is the most likely reason why you cannot find that log file. ... View more

Whenever a group shows up as a number, it means that it has not been assigned, and is therefore invalid. When splunk was installed, it created the splunk group using the next available group number - in this case 1001. It is not a bug or error, it is how Linux works. You should really be assigning mumble to a group which exists (look in /etc/group) ... View more

You can customize the look and feel of almost every aspect of Splunk via CSS - if you are talking about existing UI elements. However, if you want to create your own kind of widget (a circular dashboard panel instead of a rectangle, perhap?), then that will require a great deal more work. Before you consider extending the UI framework, I suggest that you take a look at the Sideview Utils app on Splunkbase: http://splunk-base.splunk.com/apps/36405/sideview-utils There is a free version and a paid version. This is a really powerful addition to Splunk UI development. ... View more

Check the blog for more details. http://onlinedocs.info/setup-a-remote-syslog-server-in-centos-6/ ... View more

Thanks a lot. That's an easy solution. ... View more