These sound like great starting points. I'm so new to splunk that I'm untrained at this point - just trying to grind through the log to help locate an odd behavior we started seeing over the weekend (a user reporting that he is no longer getting the reports he has set up). I am hoping to gather information from the logs to identify some starting places (rebooting, remounting, etc) Thank you very much. I'm a bit surprised that there are not a lot of scripts written to admin the tool. Most Unix vendor software I've used tended to either come with useful scripts or the community around the software had developed useful scripts. Much to learn! Thank you for the pointers. ... View more

Thank you. ... View more

So, if I don't know where all the user is located - or I want to perform an audit, validating all the users of all the searches, etc. - is there some method of dealing with that? I'm new to splunk and I don't know where User xyz's things are. I do know that some actions in splunk generate quite a long list of "invalid key in stanza" type messages ... View more

Thank you - just needing to be cautious. I appreciate your help. ... View more

Thank you for the pointer. I don't see a cost specified, but when I put it into the shopping card and click check out, I see a note that says "I agree to pay the full list price for this course" for failing to cancel..." . I'm hesitant to say "yes" to a statement that I will pay an amount which is not shown. I would have thought if it were free, I would have been told that. Am I overlooking the price some where? Thank you again. ... View more