About Shane

Shane · ‎11-24-2010

splunk-4.1.5-85165-linux-2.6-intel.deb if you're using the 32 bit Ubuntu

Shane · ‎11-23-2010

So I figured out that my problem is that I'm using Splunk on a Windows box. I ended up having the engineer from Splunk that I've been working with contact the author of the app and he said it had to be on a Linux platform. Thanks for all the help everyone.

Shane · ‎10-25-2010

How would I implement lookup tables?

Shane · ‎10-21-2010

I was not testing it that way but now that I have your last statement is correct. When I put the tag:: in front of the word host it doesn't come back with any results.

Shane · ‎10-21-2010

I'm still not seeing anything. Is there a log file I can check out to see what's not working?

Shane · ‎10-21-2010

So now I have in the [host="router1.mycompany.com"] which is what returns results in the search. I'm still not getting anything. Is there something I need to put for the other two lines?

Shane · ‎10-21-2010

I know this is going to sound bad but what I tried isn't working. If my device is named Router1 and the IP is 10.0.0.1 would it be [host=Router1] your_first_tagname = enabled your_second_tagname = enabled Also, do I have to restart SPUNK when I update the tags.conf file?

Shane · ‎10-21-2010

What is the proper format to put hosts in the tags.conf file?

Shane · ‎10-20-2010

I'm sure this is simple but I can't seem to figure it out. How do I make my Splunk Indexer a deployment server. I see it all over the place that it can be but nothing seems to say how to do it.

Shane · ‎10-20-2010

I'm in the middle of a POC of Splunk and would like to start putting my netflow data into it and be able to graphically represent netflow and even possibly do drill downs like so many programs do. Is this possible and if so how? I saw some stuff that said that I had to install a netflow software but they were all Unix software and I have Splunk on a Windows08/64 server.

Shane · ‎10-08-2010

So in the following configuration. Can I just copy it to notepad and save as a .bat file? and also how does the syntax work for the path following the SPLUNK_MSI=%~dp0\network drive\path\splunk-4.1.5-85165-x86-release.msi or is it SPLUNK_MSI=\network drive\path\splunk-4.1.5-85165-x86-release.msi Also, does this install the software so it's just a forwarder? I'm trying to figure a way to deploy this agent out to my Windows servers and they can forward to my Splunk server. How do I point the servers to my splunk server? I hope all these questions make sense. I plan to use SCCM to deploy this bat file. ****START CONFIG BELOW**** setlocal IF "%PROCESSOR_ARCHITECTURE%" == "AMD64" goto b64 IF "%PROCESSOR_ARCHITEW6432%" == "AMD64" goto b64 :b32 set SPLUNK_MSI=%~dp0\splunk-4.1.5-85165-x86-release.msi goto endb6432 :b64 set SPLUNK_MSI=%~dp0\splunk-4.1.5-85165-x64-release.msi :endb6432 if not defined ProgramFilesW6432 ( set LOC=%ProgramFiles%\Splunk ) else ( set LOC=%ProgramFilesW6432%\Splunk ) msiexec.exe /i "%SPLUNK_MSI%" INSTALLDIR="%LOC%" LAUNCHSPLUNK=0 SPLUNK_APP="" /QUIET xcopy "%~dp0\etc" "%LOC%\etc" /s /f /y copy /y "%LOC%\etc\splunk-forwarder.license" "%LOC%\etc\splunk.license" pushd "%LOC%\bin\" splunk restart --accept-license --no-prompt --answer-yes popd endlocal

Posts	11
Solutions	1
Karma Given	0
Karma Received	2
Member Since	‎10-08-2010

Online Status	Offline
Date Last Visited	‎06-05-2020 02:02 AM

How to enter hosts

How to make a Splunk indexer a Deployment Server

How can I use Netflow in Splunk when it's on a Win...

Re: Splunk Install on Ubuntu 10.4

Re: How to enter hosts

Re: How to enter hosts

Re: How to enter hosts

Re: How to enter hosts

Re: How to enter hosts

Re: How to enter hosts

How to enter hosts

How to make a Splunk indexer a Deployment Server

How can I use Netflow in Splunk when it's on a Win...

Re: Can I auto-install or deploy Splunk onto all m...