Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About JasonCarter80
JasonCarter80
Explorer
Member since:
01-14-2015
06-05-2020
Community Statistics
| Posts | 9 |
| Solutions | 0 |
| Karma Given | 3 |
| Karma Received | 1 |
| Member Since | 01-14-2015 |
Activity Feed
- Karma Re: How to define a file input for my data? for jayannah. 06-05-2020 12:47 AM
- Karma Re: splunk db connector RPC server for Richfez. 06-05-2020 12:47 AM
- Karma Re: Splunk App for AWS: Will my current configuration for multiple AWS accounts work? for _d_. 06-05-2020 12:47 AM
- Got Karma for Splunk App for AWS: Will my current configuration for multiple AWS accounts work?. 06-05-2020 12:47 AM
- Posted Re: Splunk App for AWS: Will my current configuration for multiple AWS accounts work? on All Apps and Add-ons. 12-31-2015 09:10 AM
- Posted Re: Splunk App for AWS: Will my current configuration for multiple AWS accounts work? on All Apps and Add-ons. 12-30-2015 06:40 AM
- Posted Re: Splunk App for AWS: Will my current configuration for multiple AWS accounts work? on All Apps and Add-ons. 12-29-2015 01:10 PM
- Posted Splunk App for AWS: Will my current configuration for multiple AWS accounts work? on All Apps and Add-ons. 12-29-2015 12:40 PM
- Tagged Splunk App for AWS: Will my current configuration for multiple AWS accounts work? on All Apps and Add-ons. 12-29-2015 12:40 PM
- Tagged Splunk App for AWS: Will my current configuration for multiple AWS accounts work? on All Apps and Add-ons. 12-29-2015 12:40 PM
- Tagged Splunk App for AWS: Will my current configuration for multiple AWS accounts work? on All Apps and Add-ons. 12-29-2015 12:40 PM
- Tagged Splunk App for AWS: Will my current configuration for multiple AWS accounts work? on All Apps and Add-ons. 12-29-2015 12:40 PM
- Posted Re: Route data to separate index based on CIDR on Getting Data In. 07-28-2015 07:30 PM
- Posted Re: Since our IIS log format changed, how do I tell Splunk to reindex IIS logs with a new format? on Getting Data In. 04-08-2015 04:20 PM
- Posted Since our IIS log format changed, how do I tell Splunk to reindex IIS logs with a new format? on Getting Data In. 04-08-2015 02:11 PM
- Tagged Since our IIS log format changed, how do I tell Splunk to reindex IIS logs with a new format? on Getting Data In. 04-08-2015 02:11 PM
- Tagged Since our IIS log format changed, how do I tell Splunk to reindex IIS logs with a new format? on Getting Data In. 04-08-2015 02:11 PM
- Tagged Since our IIS log format changed, how do I tell Splunk to reindex IIS logs with a new format? on Getting Data In. 04-08-2015 02:11 PM
- Tagged Since our IIS log format changed, how do I tell Splunk to reindex IIS logs with a new format? on Getting Data In. 04-08-2015 02:11 PM
- Posted Re: How to define a file input for my data? on Getting Data In. 02-02-2015 05:45 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 0 | |||
| 0 |
12-31-2015
09:10 AM
I believe I have found hard limit on the number of AWS Config items allowed to be populated, which is 30, as I have loaded all 9*9, but only see 3 accounts with all 9, and then a 4th account with 3. If i remove some regions, the config shifts but the overall number is still 30.
Is this configurable? Will this also be in place for CloudWatch and CloudTrail as well?
... View more
12-30-2015
06:40 AM
That does help a great deal, i will be spending my morning configuring 9*9 inputs for the time being, thank you for such a great app.
... View more
12-29-2015
01:10 PM
How does the initial inventory get populated? Currently I am only seeing the EC2 instances from a single region.
... View more
12-29-2015
12:40 PM
1 Karma
We have 9 accounts in AWS. I have set up AWS Config on each account, pointing to their own SNS topic. I have one SQS Queue in us-east-1 subscribed to the SNS topic from each region, which should allow Splunk to watch a single endpoint for notifications as setting up all 9 regions for all 9 accounts seems like it would be an excessive drain on my Splunk server to ping these on a regular basis.
A few questions:
Will this work as configured?
If it will not work, how bad of a performance hit am I going to have if I setup all 9 accounts against all 9 regions? Should I simply raise the default checking time?
... View more
07-28-2015
07:30 PM
Did you get this working?
... View more
04-08-2015
04:20 PM
Maybe not reprocess, but change the log type maybe? Its picking up the entire row including the new fields, but its combining some of the old data with the new data and its making my reports all jumbled.
... View more
04-08-2015
02:11 PM
On a few of our IIS servers, some one checked off a few extra fields to be logged, which is not bad to have more information, but the problem is that Splunk is treating it like the old format.
There are 4 servers with the original setup, and 2 with the new setup.
How do I tell splunk to reprocess the logs from those two sources with a new format?
... View more
02-02-2015
05:45 PM
Worked like a charm!!! Thanks!
... View more
02-02-2015
01:56 PM
Our application has a very readable, but quite unindexable format. Currently, its coming in as multiple lines, which is making my search results a bear to deal with. The format looks like this:
Entering:
Client:ClientCompanyName
LoggedInUser:me@me.com
Class:SurveyDAO
Method:isAdminUser(me@me.com)
StartTime: 2015-01-30 00:54:44 678
Query:select adminFlag from Accounts where id= ?
EndTime:2015-01-30 00:54:44 990
Anyone provide some help in defining a decent file input for that?
... View more
- Tags:
- sourcetype
