Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About pramodkumar
pramodkumar
Path Finder
Member since:
12-21-2012
06-05-2020
Community Statistics
| Posts | 24 |
| Solutions | 2 |
| Karma Given | 0 |
| Karma Received | 3 |
| Member Since | 12-21-2012 |
Activity Feed
- Got Karma for Data indexed but not displayed in Search. 06-05-2020 12:46 AM
- Got Karma for Data indexed but not displayed in Search. 06-05-2020 12:46 AM
- Got Karma for Getting error when i called a lookup file. 06-05-2020 12:46 AM
- Posted Re: Don't want column names as values in the report on Splunk Search. 02-17-2013 11:05 PM
- Posted Hardware capacity for indexing and searching on Deployment Architecture. 01-16-2013 09:19 PM
- Tagged Hardware capacity for indexing and searching on Deployment Architecture. 01-16-2013 09:19 PM
- Posted Re: Getting error when i called a lookup file on Splunk Search. 01-10-2013 03:22 AM
- Posted Getting error when i called a lookup file on Splunk Search. 01-09-2013 09:05 PM
- Tagged Getting error when i called a lookup file on Splunk Search. 01-09-2013 09:05 PM
- Posted Limiting precision/decimal on Splunk Search. 01-08-2013 09:07 AM
- Tagged Limiting precision/decimal on Splunk Search. 01-08-2013 09:07 AM
- Tagged Limiting precision/decimal on Splunk Search. 01-08-2013 09:07 AM
- Tagged Limiting precision/decimal on Splunk Search. 01-08-2013 09:07 AM
- Posted Re: Sequential file processing on Splunk Search. 01-08-2013 07:21 AM
- Posted Sequential file processing on Splunk Search. 01-07-2013 04:21 AM
- Tagged Sequential file processing on Splunk Search. 01-07-2013 04:21 AM
- Tagged Sequential file processing on Splunk Search. 01-07-2013 04:21 AM
- Posted Sending mail to gmail or other account on Splunk Search. 01-06-2013 10:16 PM
- Tagged Sending mail to gmail or other account on Splunk Search. 01-06-2013 10:16 PM
- Posted Re: What if tail -f option is enabled on Splunk Search. 01-05-2013 09:59 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 2 |
05-10-2013
04:22 PM
Your requirements are less then what Splunk used as their reference server, so starting with their reference server would be a good start. 4-10GB/day is less then what many customers generate.
Your best bet is to purchase hardware which has around the same amount of CPU and memory as the server here, and then focus on getting the fastest disks possible (high RPM, high IOPS) which can meet your storage requirements (How many months do you want to retain the data?). Storage IOPS really, really matter.
A good place to start is here:
http://docs.splunk.com/Documentation/Splunk/5.0.2/Installation/Referencehardware
... View more
01-10-2013
03:22 AM
as you suggested added as
[lookup_test.csv]
filename=lookup_test.csv in transforms.conf and now its working fine as i expected..
thanks for your correct sol.
... View more
08-09-2013
06:38 AM
This is probably better as a separate question with specific details. You can include this link to let people know you've already done some homework. Maybe you could create a macro where you pass in the values you want to round, in order to simplify the length of your search. Is the length and complexity of the search a concern?
... View more
01-07-2013
12:53 AM
1 Karma
To be able to email the result of your scheduled searches, you need to define your smtp server.
go to the Splunk Manager » System settings » Email alert settings
for the smtp server of gmail, see http://support.google.com/mail/bin/answer.py?hl=en&answer=78775
otherwise you can use any local smtp relay.
Remark, scheduling is an enterprise feature, so it will not work with a free splunk.
... View more
06-16-2018
08:41 AM
I want to use an Oracle DB stored in local laptop. Is it possible? How can I establish Connection? Am using Splunk Enterprise 7.0 & DB Connect 3.1.3
... View more
01-05-2013
09:59 AM
does it mean, only the new events added to the file those events will be picked, rest will be skipped off.. if its like that then my requirement is sufficed..
... View more
01-05-2013
09:55 AM
I my slef identified the right solution, when we use replace function, actual values with replaced the same would take when we drill down.. lets say if i replaced a value 1- Mobile generated, when i clikc on Mobile Generated, it takes the field ="Mobile Generated" which is not true. So need to look for other options...
... View more
01-02-2013
12:30 AM
1 Karma
Um, surely you just search for earliest=-5h@h ?
... View more
12-31-2012
07:45 AM
As I said above, you need to use source=*FILENAME.CSV (case sensitive). Also, you didn't mention what you can see in the summary view on the search app?
... View more
02-17-2013
11:05 PM
in command syntax mention "NOT" with your any single column name, should resolve your problem..
... View more
12-21-2012
06:09 AM
1 Karma
create/edit a file called inputs.conf in c:\program files\splunk\etc\system\local
[monitor://c:\path\dir]
index=blah
sourcetype=blah
Any file that gets put into the directory will be automatically indexed, and continually monitored for new additions. If your files are updated, splunk will see that almost immediately and index the new events.
For more information, see the Getting Data In section of the manual.
Hope this helps,
Kristian
... View more
