Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About sreynolds30
sreynolds30
Explorer
Member since:
03-07-2014
06-05-2020
Community Statistics
| Posts | 11 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 1 |
| Member Since | 03-07-2014 |
Activity Feed
- Got Karma for Re: drop events from being indexed. 06-05-2020 12:49 AM
- Posted Re: drop events from being indexed on Getting Data In. 04-17-2018 12:47 PM
- Posted Re: drop events from being indexed on Getting Data In. 04-11-2018 01:37 PM
- Posted Re: drop events from being indexed on Getting Data In. 04-11-2018 11:02 AM
- Posted Re: drop events from being indexed on Getting Data In. 04-11-2018 11:01 AM
- Posted drop events from being indexed on Getting Data In. 04-11-2018 07:18 AM
- Tagged drop events from being indexed on Getting Data In. 04-11-2018 07:18 AM
- Posted Search issue: Error in Surrounding on Splunk Search. 07-15-2014 11:54 AM
- Tagged Search issue: Error in Surrounding on Splunk Search. 07-15-2014 11:54 AM
- Tagged Search issue: Error in Surrounding on Splunk Search. 07-15-2014 11:54 AM
- Posted Re: chart values from search on Splunk Search. 04-25-2014 11:04 AM
- Posted chart values from search on Splunk Search. 04-25-2014 07:58 AM
- Tagged chart values from search on Splunk Search. 04-25-2014 07:58 AM
- Posted Re: Creating new role and can't see indexes on Security. 03-10-2014 09:53 AM
- Posted Re: Creating new role and can't see indexes on Security. 03-07-2014 11:43 AM
- Posted Creating new role and can't see indexes on Security. 03-07-2014 10:03 AM
- Tagged Creating new role and can't see indexes on Security. 03-07-2014 10:03 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
04-11-2018
01:37 PM
@niketn Thanks for the input.
I'm working on the nullQueue in a different test but it's not working as i think it should. Here's a sample of the logs that i don't want to index from my client from this source but just for that user.
2018-04-11T08:49:34,140 1077.dti.net [UDS] http-nio-8080-exec-25 (com.uds.logging.RequestLogger) INFO - env="UDS-US-Stable" requestid="bWGDWVP7FJMNhjD@awAAAC8" user="dsapi_perftest" tenantid="625c-bd25-47a5-a12d-4db5396d4ceb" role="dsapi_perftest" appid="b6de5707-cbee-477b-a332-98edce3e38e9" appname="qdxmmldbpubk" requests="1000" records="1000" status="200" method="POST" URL="/uds/batch/match/"
2018-04-11T08:49:34,353 1077.dti.net [UDS] http-nio-8080-exec-46 (com.uds.logging.RequestLogger) INFO - env="UDS-US-Stable" requestid="bmGDWVP7FJMNhjD@bAAAAC8" user="dsapi_perftest" tenantid="625c-bd25-47a5-a12d-4db5396d4ceb" role="dsapi_perftest" appid="b6de5707-cbee-477b-a332-98edce3e38e9" appname="qdxmmldbpubk" requests="1000" records="1000" status="200" method="POST" URL="/uds/batch/match/"
2018-04-11T08:49:34,552 1077.dti.net [UDS] http-nio-8080-exec-173 (com.uds.logging.RequestLogger) INFO - env="UDS-US-Stable" requestid="bmGDWVP7FJMNhjD@bQAAAC8" user="dsapi_perftest" tenantid="625c-bd25-47a5-a12d-4db5396d4ceb" role="dsapi_perftest" appid="b6de5707-cbee-477b-a332-98edce3e38e9" appname="qdxmmldbpubk" requests="1000" records="1000" status="200" method="POST" URL="/uds/batch/match/"
2018-04-11T08:49:34,763 1077.dti.net [UDS] http-nio-8080-exec-236 (com.uds.logging.RequestLogger) INFO - env="UDS-US-Stable" requestid="bmGDWVP7FJMNhjD@bgAAAC8" user="dsapi_perftest" tenantid="625c-bd25-47a5-a12d-4db5396d4ceb" role="dsapi_perftest" appid="b6de5707-cbee-477b-a332-98edce3e38e9" appname="qdxmmldbpubk" requests="1000" records="1000" status="200" method="POST" URL="/uds/batch/match/"
2018-04-11T08:49:34,989 1077.dti.net [UDS] http-nio-8080-exec-157 (com.uds.logging.RequestLogger) INFO - env="UDS-US-Stable" requestid="bmGDWVP7FJMNhjD@bwAAAC8" user="dsapi_perftest" tenantid="625c-bd25-47a5-a12d-4db5396d4ceb" role="dsapi_perftest" appid="b6de5707-cbee-477b-a332-98edce3e38e9" appname="qdxmmldbpubk" requests="1000" records="1000" status="200" method="POST" URL="/uds/batch/match/"
2018-04-11T08:49:35,196 1077.dti.net [UDS] http-nio-8080-exec-180 (com.uds.logging.RequestLogger) INFO - env="UDS-US-Stable" requestid="b2GDWVP7FJMNhjD@cAAAAC8" user="dsapi_perftest" tenantid="625c-bd25-47a5-a12d-4db5396d4ceb" role="dsapi_perftest" appid="b6de5707-cbee-477b-a332-98edce3e38e9" appname="qdxmmldbpubk" requests="1000" records="1000" status="200" method="POST" URL="/uds/batch/match/"
... View more
04-11-2018
11:02 AM
Sorry I guess i should have stated this better... that i just want to drop this events from being indexed and leave everything else within that source.
I'll look at the unwanted events to nullQueue
... View more
04-11-2018
11:01 AM
Sorry I guess i should have stated this better... that i just want to drop this events from being indexed and leave everything else within that source.
I'll look at the unwanted events to nullQueue
... View more
04-11-2018
07:18 AM
I have a request from some users of mine to do the following.
I need to drop events from a source and user ..
source: /var/log/uds/uds.log
user: dsapi_perftest
... View more
- Tags:
- splunk-enterprise
07-15-2014
11:54 AM
On event actions under show source my users are getting the following error:
Streamed search execute failed because: Error in 'surrounding': Too many events (> 10000) in a single second.
No search results for surrounding search where targetId=239:112912518
I have two search heads and this error only occurs on one search head and I can't find anything different in the two. I only have one indexer at this point.
... View more
- Tags:
- search
- surrounding
04-25-2014
07:58 AM
I have a search that returns time as this:
Apr 25 2014 14:51:40 GMT: INFO (nsup): (base/thr_nsup.c:1249) {ddp-ns} Records: 17798730, 17798730 0-vt, 0(0) expired, 0(0) evicted, 0(0) set deletes, 0(0) set evicted. Evict ttls: 0,0,0.000. Waits: 0,0,0. Total time: 3169 ms
I would like to chart this total time over time but not having luck. thanks.
... View more
- Tags:
- chart
03-10-2014
09:53 AM
So I'm trying to find the release notes that this issue has been fixed in 6.0.2 before doing the rpm upgrade. Not having luck does anyone have a link to this being fixed in 6.0.2? thanks.
... View more
03-07-2014
11:43 AM
thanks for the replies. I will upgrade to 6.0.2 we just put 6.0.1 on the other day. 🙂
... View more
03-07-2014
10:03 AM
So I'm creating a new role on my SH version 6 and on this role it can't see indexes on my indexer. I can only see the internal index on the SH. So I can't tie down this role.
Now i can do searches and data from the indexes on my indexer just find.
any thoughts?
... View more
- Tags:
- role
