About dgarstang

dgarstang · ‎12-02-2010

Splunk does NOT work well with puppet. There are quite a number of files that are auto-generated by Splunk, and re-pushing out the old files with puppet will break Splunk. Also, if you deploy all the files you need with puppet, when you start Splunk for the first time, it thinks your doing an upgrade. Don't know what the repurcusions of that might be.

dgarstang · ‎10-31-2010

As an admin that's used to searching logs with /bin/less, ? and /, I find the Splunk web interface pretty confusing. How can I limit searches in the web UI to specific source file names? In fact, I can't even see where Splunk even shows the name of the file that searches appeared in. This is really confusing. If I don't know what file a match was in, I really have no context of what I am seeing. Doug.

Posts	2
Solutions	0
Karma Given	0
Karma Received	1
Member Since	‎10-31-2010

Online Status	Offline
Date Last Visited	‎06-05-2020 02:02 AM

Search by file name?

Re: Does splunk play nice with puppet?

Search by file name?