About shahneel

shahneel · ‎02-15-2016

HI, Yes it is definitely possible to monitor logs via splunk, provided that you know that location of the logs that you want to monitor, following is the way you can configure it in Splunk. Open Splunk in your Browser. Click on ADD DATA. Click on MONITOR Click on Files and Directories Select your log path, (Make sure you select Continuously monitor.) Hope This helps 🙂 Regards, Neel

shahneel · ‎02-02-2016

Thanks 🙂

shahneel · ‎02-01-2016

are you sure ?? i dint come across any document mentioning the changes in Home Page. 😞

shahneel · ‎02-01-2016

I have upgraded my environment from Splunk 6.1.3 to Splunk 6.3.2 My Splunk 6.1.3 launcher used to look like and post upgrade to 6.3.2, launcher looks like can someone please guide me how do i configure my launcher so that it again looks like the old one.

shahneel · ‎12-09-2015

but in that case splunk would capture data like this D:/location/location/location/original_file.log and D:/location/location/location/temporary_file.log ... right ?

shahneel · ‎12-09-2015

if name was changed, it would log under different source. Source i see here is same

shahneel · ‎12-09-2015

that looks unlikely 😞

shahneel · ‎12-09-2015

HI All, My source.log file is approx 40GB (syslog format), but my Splunk license consumption in reading that log is 60-70GB. Can you please help me how to determine relationship between data volume and license usage? Thanks in Advance Neel

shahneel · ‎10-17-2015

I guess he doesnot want mongodb data in splunk ... he wants to lookup values from MongoDB... that can be done via Python Script. no HUNK required.

shahneel · ‎10-17-2015

Probably your Splunk Environment is on Windows. HUNK supports only Linux as of now.

shahneel · ‎09-08-2015

I am not really sure about this, the reason being that i am using DISTRIBUTED Architecture. If i was using Single Server instance, then mabie there would hav been no data consumption. Since indexing of _INTERNAL Logs are not a part of License. But the tricky part is when data from other Forwarders flow to Indexer. I am not sure if that is part of license. If you can guide me on that ?

shahneel · ‎09-07-2015

I tried to search this, but didn't seem to find an answer. I understand that all the logs that come to a Splunk Indexer from _INTERNAL does not count under Splunk licensing. I have a distributed architecture in my Organization with Multiple Search Heads, Dispatchers, Indexers, and Forwarders, and I want to Start System Health Check using S.O.S. App. However, will this add additional data to indexer since the performance data from other servers (Forwarders etc) also needs to be indexed? Can somebody please throw some light on this topic? Thanks In advance Best Regards, Neel Shah

Posts	12
Solutions	0
Karma Given	7
Karma Received	2
Member Since	‎09-07-2015

Online Status	Offline
Date Last Visited	‎11-04-2021 06:08 AM

Splunk Launcher UI changed after upgrade to from S...

Can someone help me understand the relationship be...

How will the S.o.S. - Splunk on Splunk app impact ...

Re: To monitor Local Machine Browser logs

Re: Splunk Launcher UI changed after upgrade to fr...

Re: Splunk Launcher UI changed after upgrade to fr...

Splunk Launcher UI changed after upgrade to from S...

Re: Can someone help me understand the relationshi...

Re: Can someone help me understand the relationshi...

Re: Can someone help me understand the relationshi...

Can someone help me understand the relationship be...

Re: MongoDB and Splunk

Re: Why can't I find virtual indexes after install...

Re: How will the S.o.S. - Splunk on Splunk app imp...

How will the S.o.S. - Splunk on Splunk app impact ...