Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About sivapuvvada
sivapuvvada
Path Finder
Member since:
11-04-2015
06-05-2020
Community Statistics
| Posts | 22 |
| Solutions | 3 |
| Karma Given | 0 |
| Karma Received | 2 |
| Member Since | 11-04-2015 |
Activity Feed
- Got Karma for Re: How to resolve frequent license issue errors such as "In handler 'localslave': editTracker failed" on Search Head Cluster?. 06-05-2020 12:48 AM
- Got Karma for Re: How can I show all values in a pie chart instead of some values being consolidated into "other"?. 06-05-2020 12:47 AM
- Posted How to add Timezone dropdown in Splunk dashboard on Dashboards & Visualizations. 05-31-2018 05:00 PM
- Tagged How to add Timezone dropdown in Splunk dashboard on Dashboards & Visualizations. 05-31-2018 05:00 PM
- Posted Re: Splunk insights for infrastructure scripts are not working as expected on Splunk Dev. 05-17-2018 02:03 PM
- Posted Splunk insights for infrastructure scripts are not working as expected on Splunk Dev. 05-16-2018 04:22 PM
- Tagged Splunk insights for infrastructure scripts are not working as expected on Splunk Dev. 05-16-2018 04:22 PM
- Posted Re: scheduler.log is not rolling in Splunk enterprise on Getting Data In. 05-01-2018 03:45 PM
- Posted Re: scheduler.log is not rolling in Splunk enterprise on Getting Data In. 04-19-2018 02:13 PM
- Posted scheduler.log is not rolling in Splunk enterprise on Getting Data In. 04-18-2018 03:29 PM
- Tagged scheduler.log is not rolling in Splunk enterprise on Getting Data In. 04-18-2018 03:29 PM
- Posted Re: How to send an alert email with cluster map visualization? on All Apps and Add-ons. 01-22-2018 01:34 PM
- Posted Re: How to resolve frequent license issue errors such as "In handler 'localslave': editTracker failed" on Search Head Cluster? on Installation. 09-28-2017 12:08 PM
- Posted REST API Modular Input: Why is the add-on not working correctly with Splunk 6.5.2? on All Apps and Add-ons. 04-06-2017 03:07 PM
- Tagged REST API Modular Input: Why is the add-on not working correctly with Splunk 6.5.2? on All Apps and Add-ons. 04-06-2017 03:07 PM
- Tagged REST API Modular Input: Why is the add-on not working correctly with Splunk 6.5.2? on All Apps and Add-ons. 04-06-2017 03:07 PM
- Tagged REST API Modular Input: Why is the add-on not working correctly with Splunk 6.5.2? on All Apps and Add-ons. 04-06-2017 03:07 PM
- Tagged REST API Modular Input: Why is the add-on not working correctly with Splunk 6.5.2? on All Apps and Add-ons. 04-06-2017 03:07 PM
- Posted Re: REST Modular Input terminates unexpectedly on All Apps and Add-ons. 04-06-2017 02:45 PM
- Posted Re: Get Distinct Count of Success & Total based on UserID on Splunk Search. 02-07-2017 09:40 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
05-31-2018
05:00 PM
I want to add Timezon option which we have in account settings of an user to dashboard . Please let me know if any one has done that
... View more
- Tags:
- splunk-enterprise
05-17-2018
02:03 PM
Hi @PowerPacked ,
I am getting the below error when try to execute install_agent.sh
Missing required arguments - SPLUNK_URL, HEC_PORT and HEC_TOKEN.
which SPLUNK URL i need to configure , do i need to configure forwarder URL or SH URL ,
Also confirm on HEC_PORT and HEC_TOKEN
... View more
05-16-2018
04:22 PM
Hi ,
I tried to test the splunk insights for infrastructure unfortunately my servers don't have internet connection , Due to that all the agent scripts are failing ..
How can i download all the packages for this agent from internet , can you please provide those details .
... View more
- Tags:
- splunk-enterprise
05-01-2018
03:45 PM
Disable the Spluklightforwarder app under the etc/apps directory .
... View more
04-19-2018
02:13 PM
yes i checked scheduler.log is not present and nothing is showing in splunkd.log for scheduler
... View more
04-18-2018
03:29 PM
Hi Team ,
we are not seeing scheduler.log in splunk .
we have tried the below option but no luck
default-mode.conf file :
[pipeline:scheduler]
disabled = false
and also updated savedsearches.conf enableSched = 1
... View more
- Tags:
- splunk-enterprise
01-22-2018
01:34 PM
I think splunk don't have this in built capability
... View more
09-28-2017
12:08 PM
1 Karma
The root cause for the issue is pass4SymmKey present in server.conf
[general]
pass4SymmKey = test
serverName = x.x.x.x.x
When ever any server you tried to point to licensemaster , The LM pass4symmkey should be same as the server which you want to point .
this one implemented in prod environment and working fine without any issues .
... View more
04-06-2017
03:07 PM
Hi I have installed REST API Modular Input add-on on my Search Head. I am not seeing REST input under my data inputs.
I am using Splunk 6.5.2 version .
settings --> datainputs --> not seeing REST as per the documentation .
... View more
04-06-2017
02:45 PM
Hi Damien ,
I have installed this app on SH and i am not seeing any REST input under datainputs , Could you please help me on this ,
... View more
02-07-2017
09:40 AM
you can use base search in so that the search will get the results from Indexer one time and you can use the results where you want .
Please refer below link
http://docs.splunk.com/Documentation/Splunk/6.2.5/Viz/Savedsearches#Post-process_examples
... View more
02-07-2017
09:35 AM
If you have huge csv's in the apps , you will see these kind of issues .
you need to disable search peers and enable back , If you still see the issue need to disable few apps on the SH .
... View more
01-16-2017
10:21 AM
Hi Hunter ,
I tried as you suggested but got the below error message .
In handler 'localslave': editTracker failed, reason='WARN: path=/masterlm/usage: invalid signature on request from ip=x.x.xx.xxx
... View more
01-16-2017
09:05 AM
We have Search Head cluster with 3 nodes. We try to point all these nodes to my License master . When I tried to do as the master Uri from the SH members/Deployer UI it showing error message:
"Bad Request — In handler 'localslave': editTracker failed, reason='WARN: path=/masterlm/usage: invalid signature on request from ip=x.x.xx.xx "
I have manually updated the same from CLI in server.conf, it worked but slaves are not contacting frequently license master . After 24 hrs i am getting license expired message on Splunk Web. Again, I have removed the master uri stanza and placed the same back and restarted. it worked
How to fix this one ?
Also I have done telnet from my search head members to license master and it connected without any issues.
... View more
Labels
- Labels:
-
CLI
-
license
-
search head
01-05-2017
08:54 AM
I have found the issue , this is due to query which i have used .. In my query have renamed the field to existing field .
I have removed the rename command from the query as those fields are already extracted by Splunk .
Now the search command is working fine as expected without any issues .
Thank you for all your help guys .
... View more
01-04-2017
08:50 AM
I have used this query in the search :
index=* sourcetype=* | spath input=test | rename test{}.messaging{}.status as status,test{}.messaging{}.cap_status as cap_status
Till here I am receiving the data but when i added search status=N it is not displaying any results .
I am seeing below error in the search.log :
SearchResultParserExecutor - Encountered an error deserializing SearchResultsInfo from ResultsStream header.
... View more
01-04-2017
08:49 AM
I have used this query in the search :
index=* sourcetype=* | spath input=test | rename test{}.messaging{}.status as status,test{}.messaging{}.cap_status as cap_status
Till here I am receiving the data but when i added search status=N it is not displaying any results .
I am seeing below error in the search.log :
SearchResultParserExecutor - Encountered an error deserializing SearchResultsInfo from ResultsStream header.
... View more
01-03-2017
03:40 PM
I have upgraded my Splunk version to 6.5.1 from 6.4. After this, I observed the "search" command is not working.
Is there any fix for this?
... View more
06-06-2016
10:32 AM
I am not always getting one interesting field, even though I have selected all fields from the fields bar on the left side.
How does Splunk extract interesting fields by default? Where do we need to make a change if we want to always see this interesting field by default?
... View more
05-12-2016
05:20 PM
"input1" is the token value from the multiselect or Lable name ?
... View more
12-29-2015
12:22 PM
1 Karma
I tried with limit=0 still not working 😞
... View more
12-28-2015
11:08 AM
I tried useother=f , it is removing the other values from the Pie chart, but I need all the values in the pie chart instead of removing some.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
