As I've learned recently, there's nothing stopping someone from defining a different Host value in an input, and causing that problematic situation much more quickly and broadly.  This seems like a huge oversight in functionality. ... View more

any one can help on this request ... View more

Give this a try (runanywhere search for testing, just use the last line for conversion expression) | gentimes start=-1 | eval LastBootUpTime="20170522110049.412726-240" | eval _time=strptime(LastBootUpTime,"%Y%m%d%H%M%S.%N%Z") ... View more

Looks like 6.2.8 is the latest from what I see: https://www.splunk.com/page/previous_releases/universalforwarder#x86_64windows Windows 7, 8 and 8.1 (64-bit) Windows Server 2003, 2003 R2, 2008, 2008 R2, 2012 and 2012 R2 (64-bit) 6.2.8: splunkforwarder-6.2.8-275559-x64-release.msi Release Notes ... View more

Hi siddharthmis, are you using Window Perfmon stanza in the UF ? ... View more

7000 UF's - serious stuff. Nothing should be manual at this scale... Be sure that each UF server is configured correctly. We are running into issues of consistent crashes of the UFs. Quite often the ulimit -n (open files) is at 1024 versus the minimum of 8192. Lots of grief ; -) ... View more

Thankyou everyone that's posted a response here, you gave me various options and areas to check that I'd renamed my server correctly. However I still had no license usage reports as the license master was still finding the old servername somewhere. The final piece for me was finding the entries in the assets.csv file which corrected the license master name in the Monitoring Console dash/reports.... ... View more

Have you tried edit your file app.conf? is_configured = true ... View more

The above search I posted resolved my issue. ... View more

Hey Glenn, agreed. If THP is disabled, then defrag on or off is meaningless. Splunk's health check code is misreporting the combination of enabled=never, defrag=always as an issue when it is not, and there is a bug opened to resolve that. Good catch! ... View more

Is this still applicable in 6.x? Looking to manage deployment clients and will need to support several thousand on each DS. ... View more

Dear deyeo, Is there any update in this topic? I have a similar problem: need to bind splunk-web to a specific IP, while need to receive logs on all ip. Thanks, István ... View more