Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About diegosainz
diegosainz
Path Finder
Member since:
03-22-2012
06-05-2020
Community Statistics
| Posts | 33 |
| Solutions | 0 |
| Karma Given | 6 |
| Karma Received | 4 |
| Member Since | 03-22-2012 |
Activity Feed
- Got Karma for First and Last Business Day. 06-05-2020 12:47 AM
- Karma Re: Receive Email for jtrucks. 06-05-2020 12:46 AM
- Karma Re: Query for host not sending sourcetype for martin_mueller. 06-05-2020 12:46 AM
- Karma Re: average count by day for lguinn2. 06-05-2020 12:46 AM
- Karma Re: Time based alerts for BobM. 06-05-2020 12:46 AM
- Karma Re: XenApp 5 - no data for jconger. 06-05-2020 12:46 AM
- Karma Re: fsmonitor question for rnolette. 06-05-2020 12:46 AM
- Got Karma for Re: Plain Text Email options. 06-05-2020 12:46 AM
- Got Karma for Remove ::ffff: from logs. 06-05-2020 12:46 AM
- Got Karma for How to identify network traffic sent from indexers and from search head to user?. 06-05-2020 12:46 AM
- Posted Is there a query I can use to get the amount of bandwidth used by my forwarders? on Splunk Search. 12-22-2014 02:36 PM
- Tagged Is there a query I can use to get the amount of bandwidth used by my forwarders? on Splunk Search. 12-22-2014 02:36 PM
- Tagged Is there a query I can use to get the amount of bandwidth used by my forwarders? on Splunk Search. 12-22-2014 02:36 PM
- Posted First and Last Business Day on Reporting. 09-22-2014 06:58 AM
- Posted How to identify network traffic sent from indexers and from search head to user? on Monitoring Splunk. 06-11-2014 10:49 AM
- Posted Alert on file age on Alerting. 12-04-2013 08:26 AM
- Posted Alert on Interactive logins on All Apps and Add-ons. 10-15-2013 09:34 AM
- Posted Receive Email on Reporting. 08-05-2013 09:42 AM
- Tagged Receive Email on Reporting. 08-05-2013 09:42 AM
- Tagged Receive Email on Reporting. 08-05-2013 09:42 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 1 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 |
12-22-2014
02:36 PM
Is there a query I can use to get the amount of bandwidth used by my forwarders?
... View more
09-22-2014
06:58 AM
1 Karma
I am looking to build an alert that is fired on the first and last business day of the month. Do you know of a way to make the search only run on those days?
Thank you
... View more
- Tags:
- cron
- scheduled-search
06-11-2014
10:49 AM
1 Karma
Is there a way in splunk to identify how much network traffic is being sent from the indexers (not just how much is indexed)? In addition, can I find a rough estimate of traffic from search head to user? I am not sure if Splunk logs this, but I was hoping.
... View more
- Tags:
- bandwidth
- statistics
12-04-2013
08:26 AM
I would like to know if it is possible to be alerted if a file is older then a specific time frame. We have files that are written down every 5 minutes. I would like to be alerted if the age of the file is in excess of 7 minutes.
Any input would be appreciated.
... View more
10-15-2013
09:34 AM
I am looking to run a daily report of users from a specific OU that are listed as logging in interactively (EventCode=4624 AND Logon_Type=3). Is there a way to run the subsearch to correlate that for a daily report?
... View more
- Tags:
- ldapsearch
- sub-search
06-04-2013
10:10 AM
1 Karma
I am looking to remove the ::ffff: from Windows event logs:
Network Information:
Client Address: ::ffff:XX.XX.XX.XX
Client Port: 51806
Any assistance would be appreciated.
... View more
05-31-2013
02:57 PM
I am looking for some assistance to be able to script this lookup for windows systems
tasklist /fo csv /v
any input would be appreciated
... View more
05-24-2013
10:38 AM
I am trying to find out how to identify which host(s) are not sending a particular datasource. Is there a query to identify this?
... View more
04-25-2013
10:06 AM
Thank you. We have found part of the problem, the citrix admin did not install the Citrix Powershell cmdlets
... View more
04-25-2013
08:09 AM
That has corrected a majority of it. Thank you. I do have another question, does this app work with presentation server 4.5?
... View more
04-22-2013
11:56 AM
We have done that, we would like to know what has changed in the file.
... View more
04-22-2013
08:24 AM
Is it possible for a file monitored with fsmonitor to send an alert on any difference of the file? or would monitoring the file be able to provide that visibility.
... View more
- Tags:
- fschange
04-18-2013
08:58 AM
It runs as system (which is the same config we have the 6.5 servers that run correctly)
... View more
04-18-2013
08:32 AM
[script://.\bin\GetICASessionStat5.path]
source=xenapp:powershell:GetICASessionStat5.ps1
sourcetype=xenapp:50:icasession
index=xenapp
interval=60
disabled=0
... View more
04-18-2013
08:32 AM
[script://.\bin\GetXAServerLoad5.path]
source=xenapp:powershell:GetXAServerload5.ps1
sourcetype=xenapp:50:serverload
index=xenapp
interval=60
disabled=0
[script://.\bin\GetXASession5.path]
source=xenapp:powershell:GetXASession5.ps1
sourcetype=xenapp:50:session
index=xenapp
interval=180
disabled=0
[script://.\bin\GetXASessionProcess5.path]
source=xenapp:powershell:GetXASessionProcess5.ps1
sourcetype=xenapp:50:sessionprocess
index=xenapp
interval=180
disabled=0
... View more
04-18-2013
08:32 AM
[script://.\bin\GetProcess.path]
source=Windows:PowerShell:getprocess.ps1
sourcetype=WMI:ProcessDetails
index=xenapp_winevents
interval=180
disabled=0
[script://.\bin\GetXAServer5.path]
source=xenapp:powershell:GetXAServer5.ps1
sourcetype=xenapp:50:server
index=xenapp
interval=300
disabled=0
[script://.\bin\GetXAServerHotfix5.path]
source=xenapp:powershell:GetXAServerHotfix5.ps1
sourcetype=xenapp:50:serverhotfix
index=xenapp
interval=300
disabled=0
... View more
04-18-2013
08:31 AM
[script://.\bin\perfmon.path]
disabled = 0
source = PerfmonMk
sourcetype = PerfmonMk
index = xenapp_perfmon
[script://$SPLUNK_HOME\bin\scripts\splunk-perfmon.path]
disabled = 0
index = xenapp_perfmon
[script://$SPLUNK_HOME\bin\scripts\splunk-wmi.path]
disabled = 0
index = xenapp_winevents
[script://.\bin\GetInstalledSoftware.path]
source=Windows:PowerShell:getinstalledsoftware.ps1
sourcetype=WMI:InstalledSoftware
index=xenapp_winevents
interval=21600
disabled=0
... View more
04-16-2013
11:38 AM
I have installed the Splunk App for XenApp and I am getting data from the 6.5 version systems in my environment, but no data is coming from my version 5. I am getting Windows Event data, but none of the data from the powershell scripts.
... View more
04-15-2013
11:57 AM
I would like create a monitor/alert that looks for a *.msg file in a particular folder on the quarter hour. Any advice for the Inputs config would be appreciated.
... View more
