Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About splunkot
splunkot
New Member
Member since:
01-09-2019
06-05-2020
Community Statistics
| Posts | 6 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 01-09-2019 |
Activity Feed
- Posted Re: Cisco Network App and Search & Reporting App Time Difference on Splunk Search. 03-13-2019 01:04 PM
- Posted Re: Cisco Network App and Search & Reporting App Time Difference on Splunk Search. 03-12-2019 05:30 PM
- Posted Re: Cisco Network App and Search & Reporting App Time Difference on Splunk Search. 02-25-2019 11:46 AM
- Posted Cisco Network App and Search & Reporting App Time Difference on Splunk Search. 02-22-2019 07:21 PM
- Tagged Cisco Network App and Search & Reporting App Time Difference on Splunk Search. 02-22-2019 07:21 PM
- Tagged Cisco Network App and Search & Reporting App Time Difference on Splunk Search. 02-22-2019 07:21 PM
- Posted Re: How to Change Cisco SG350 Switch's sourcetype from syslog to cisco:ios? on Splunk Search. 01-11-2019 07:08 PM
- Posted How to Change Cisco SG350 Switch's sourcetype from syslog to cisco:ios? on Splunk Search. 01-09-2019 03:39 PM
- Tagged How to Change Cisco SG350 Switch's sourcetype from syslog to cisco:ios? on Splunk Search. 01-09-2019 03:39 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
03-13-2019
01:04 PM
To confirm, I removed Splunk App for Windows Infrastructure, Splunk Add-on for Microsoft Winows, and Splunk Supporting Add-on for Microsoft Windows Active Directory and the display time for the Cisco Networks Overview and Search and Reporting are still UTC-10.
The display time issue may have been resolved from the recent Splunk 7.2.4.2 update.
... View more
03-12-2019
05:30 PM
I am not sure why but, the problem corrected itself after deploying:
Splunk App for Windows Infrastructure
Splunk Add-on for Microsoft Windows
Splunk Supporting Add-on for Microsoft Windows Active Directory
Now my Cisco Networks Overview and Search and Reporting display time are both UTC-10.
... View more
02-25-2019
11:46 AM
I have "clock timezone HST -10" configured on my Cisco IOS devices. My Splunk instance is configured with my local time. I searched all apps\system local props.conf for "TZ" and the only TZ configured is for the TA-cisco_ios app.
... View more
02-22-2019
07:21 PM
With no TZ configured, my Search & Reporting App is displaying the correct time (UTC-10:00 or 13:00 HST) but, my Cisco Networks App is displaying a time 10 hours ahead (23:00 HST) of our local time.
When I edit the props.conf in the TA-cisco_ios folder, I enter "TZ = UTC" under the syslog stanza, now the display time is correct (13:00 HST) for the Cisco Network App, but now the Search & Reporting App is displaying a time 10 hours behind (03:00 HST) our local time.
I tried editing both props.conf in the TA-cisco_ios and search App folders with no success.
All of my event logs' time are correct, so how do I get both Cisco Network and Search & Reporting App to display the correct time?
... View more
01-11-2019
07:08 PM
Thank you MuS, that did the trick.
... View more
01-09-2019
03:39 PM
I have Cisco Networks App for Splunk Enterprise version 2.5.6 and Cisco Networks Add-on for Splunk Enterprise version 2.5.4 working great for the supported devices. I believe the SG350 switch is not supported, so the sourcetype="syslog". How do I change the source type for all my SG350 from syslog to cisco:ios, so that it can populate the Cisco Network Overview GUI?
... View more
- Tags:
- splunk-enterprise
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
