×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
aweishe1
Explorer
Member since: ‎07-23-2018
‎10-01-2024
Community Statistics
Posts 5
Solutions 0
Karma Given 0
Karma Received 1
Member Since ‎07-23-2018
View All

Re: Input page is not available in add-on (built w...

by in Splunk Dev
‎06-13-2022 02:02 AM
‎06-13-2022 02:02 AM
facing the same problem.. did u managed to solve it? ... View more

Re: DNS load balancing deployment client traffic

by in Deployment Architecture
‎05-19-2020 02:24 AM
‎05-19-2020 02:24 AM
It failing for all my hosts and the handshake can never complete. I have changed to use a F5 load balancer instead and it's working and in fact, better. Coz there' proper load balancing and it can also prevent the client from hitting a node which is down. Hope this helps anyone who is trying to implement multi deployment server using DNS round robin. I have only tested with Windows DNS tho. It might work with NAMED. Otherwise, avoid using DNS round robin for multi deployment server set-up. ... View more

Re: DNS load balancing deployment client traffic

by in Deployment Architecture
‎05-15-2020 07:50 AM
‎05-15-2020 07:50 AM
couldnt get it to work. 05-15-2020 22:49:01.666 +0800 WARN DC:PhonehomeThread - No response to handshake for too long; starting over. 05-15-2020 22:49:01.666 +0800 WARN DC:PhonehomeThread - No response to handshake for too long; starting over. can never establish a handshake. Using Windows DNS. Anyone has any clue if this method still works? ... View more

Re: DNS load balancing deployment client traffic

by in Deployment Architecture
‎05-15-2020 07:45 AM
‎05-15-2020 07:45 AM
i'm experiencing the same thing with DNS load balancing for DS. Did you managed to fix it? ... View more

index exported evt / evtx files

by in Monitoring Splunk
‎07-23-2018 12:40 AM
1 Karma
‎07-23-2018 12:40 AM
1 Karma
Hi, I am trying to index the exported evt / evtx files into splunk. I am using input.conf to monitor the directory on the same server where the evtx are exported (same server, same OS - Windows 2012 R2): [monitor://D:\Splunk\*.evtx] disabled = 0 sourcetype = WinEventLog:Security:Test index = wineventlog However, once the data got indexed, i tried to search and I found these: ElfFile\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 Help appreciated. Thanks! ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎10-01-2024 06:56 PM
Karma from
View All