About 1500372

1500372 · ‎12-15-2016

Upgrading Splunk Universal Forwarder over 6.4 solve the problem in my case.

1500372 · ‎05-24-2016

I've configured inputs.conf like below, but I can't see any data. (Other stanzas for [perfmon:// are all working perfectly.) Splunk Version: Splunk Enterprise 6.2.1 Target Server: Windows 2008 R2 (I can see the Perfmon object and counters from perfmon.exe screen.) I've double checked all strings to determine if the case sensitive problems. [perfmon://RPC_HTTP_Proxy] index=perfmon object=RPC/HTTP Proxy counters=\RPC/HTTP Requests per Second; Current Number of Unique Users; Number of Failed Back-End Connection Attempts per Second interval=10 disabled=false showZeroValue=true useEnglishOnly=true Please help me how to index above Perfmon counters properly.

1500372 · ‎05-03-2016

Did you remove all of configuration from datetime.xml? Why don't you copy datetime.xml from /etc to your directory? I got the same situation and I resolved that like below. copy datetime.xml to specific directory. cp -p /home/splunk/etc/datetime.xml /home/splunk/etc/system/local/my_datetime.xml configure props.conf [mysourcetype] DATETIME_CONFIG = /etc/system/local/my_datetime.xml ... Put your datetime configuration to my_datetime.xml (I didn't remove anything from my_datetime.xml) restart Splunk and monitor file At that moment,I saw my test file name of ADESS_FANALL_01082014_01172014_195441.csv was indexed with expected timestamp. (14/01/08 xx:xx:xx.xxx)

1500372 · ‎03-24-2016

I have an wondering about Preview Release in Machine Learning Toolkit and Showcase Documentation. They says, Machine Learning Toolkit App is currently designed to only run on a single search head. (https://github.com/splunk/ml-toolkit-docs/wiki) I use Splunk Enterprise in Search Head Clustering and Indexer Clustering environment. I would like to know what cannot be done via Clustering environment?

Posts	4
Solutions	1
Karma Given	0
Karma Received	0
Member Since	‎03-14-2016

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

How to configure inputs.conf to index Windows Perf...

Machine Learning Toolkit and Requirements

Re: How to configure inputs.conf to index Windows ...

How to configure inputs.conf to index Windows Perf...

Re: Extracting date from file name via custom date...

Machine Learning Toolkit and Requirements