About ryanlait

ryanlait · ‎01-04-2016

I had the same issue and was able to stop the errors by adding the following into the csv's that were flagging errors for me: a,b,c If it still flags errors remember to disable the lookup definitions to those particular csv's. This is probably only helpful if you are not using them though sorry. I too am keen to know what "should" be in there.

ryanlait · ‎10-23-2015

I cannot speak for checkpoint, but forwarding BlueCoat logs via syslog to our heavy forwarder has been simple and effective for me. Configure a UDP listener on a heavy forwarder and configure your bluecoat/s to forward logs to your heavy forwarder IP:port via syslog. We've written a few custom search queries and dashboards but the BlueCoat app is a good starting point.

ryanlait · ‎10-23-2015

If you're using Chrome you could look at the Revolver addon. https://chrome.google.com/webstore/detail/revolver-tabs/dlknooajieciikpedpldejhhijacnbda?hl=en It allows you to automatically cycle through browser tabs and set a refresh time frame for each tab. Plus F11 on windows will send Splunk into a full-screen mode which looks pretty neat on a big screen.

ryanlait · ‎05-03-2015

I have Splunk monitoring a directory of CSV files that imports events using the date the file was created. This runs fortnightly so my timeline only shows events every 14 days. I'd like to be able to timechart over the previous 6 months, the number of events and have it span the dates from the timeline. I don't want the data to be bucketed together as it is a point in time snapshot and bucketing together will provide inaccurate results. But I want to avoid the peaks and troughs it would create by creating too short a span. Kind Regards,

Posts	4
Solutions	1
Karma Given	1
Karma Received	1
Member Since	‎01-05-2015

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Timechart span by event dates

Re: Splunk App for Windows Infrastructure: Why is ...

Re: Best way to collect logs from Checkpoint and B...

Re: How can I automatically rotate and refresh dif...

Timechart span by event dates