Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About saurabh0912
saurabh0912
Path Finder
Member since:
03-06-2019
08-22-2023
Community Statistics
| Posts | 21 |
| Solutions | 0 |
| Karma Given | 14 |
| Karma Received | 0 |
| Member Since | 03-06-2019 |
Activity Feed
- Posted Re: Is it possible to create new indexer cluster and join it with old cluster to migrate old data from old to new cluste on Deployment Architecture. 08-22-2023 08:48 AM
- Posted Is it possible to create new indexer cluster and join it with old cluster to migrate old data from old to new cluster? on Deployment Architecture. 08-22-2023 08:29 AM
- Posted Why after upgrade, App Name not visible in the Application menu? on Installation. 04-20-2021 03:47 AM
- Karma Re: How to migrate entire Indexer cluster from one set of VMs to another set of VMs? for richgalloway. 04-20-2021 03:44 AM
- Posted How to migrate entire Indexer cluster from one set of VMs to another set of VMs? on Installation. 01-15-2021 12:17 PM
- Karma Re: How to thaw data from frozen back into splunk? for richgalloway. 06-05-2020 12:51 AM
- Karma Re: What is the best practice for moving frozen data into a bigger disk without losing any data? for nickhills. 06-05-2020 12:51 AM
- Karma Re: universal forwarder is installed in a QA server and configured to splunk still logs are not showing up in splunk what are the possible connections to be checked? for saurabh009. 06-05-2020 12:50 AM
- Karma Can I set different interval of execution for different hosts receiving same scripted input app from deployment server? for saurabh009. 06-05-2020 12:50 AM
- Karma Re: Can I set different interval of execution for different hosts receiving same scripted input app from deployment server? for saurabh009. 06-05-2020 12:50 AM
- Karma Re: Global dashboard.js for saurabh009. 06-05-2020 12:50 AM
- Karma How to setup order of apps in the launcher page for all the users? for saurabh009. 06-05-2020 12:50 AM
- Karma Re: How to setup order of apps in the launcher page for all the users? for saurabh009. 06-05-2020 12:50 AM
- Karma Does splunk support Appdynamics add-on integration if they are behind the SAML? for saurabh009. 06-05-2020 12:50 AM
- Karma Re: Does splunk support Appdynamics add-on integration if they are behind the SAML? for saurabh009. 06-05-2020 12:50 AM
- Karma Why am I unable to delete search peers from the Distributed Management Console? for saurabh009. 06-05-2020 12:48 AM
- Karma Re: Why am I unable to delete search peers from the Distributed Management Console? for saurabh009. 06-05-2020 12:48 AM
- Karma How to extract IOPS of an indexer in Splunk for saurabh009. 06-05-2020 12:48 AM
- Posted Re: Splunk query to determine how long a Splunk instance was down in past? on Splunk Search. 04-02-2020 09:13 AM
- Posted Splunk query to determine how long a Splunk instance was down in past? on Splunk Search. 04-02-2020 08:22 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
08-22-2023
08:48 AM
Thanks @gcusello , Our intention is to create new splunk envrionment , while keeping the splunk alive for some time in old environment. I was thinking of creating a large cluster, having indexes on both sides, and let splunk copy the entire data from old indexes to the new indexes and once cutover times comes, disconnect the old indexers and create new cluster master on new cloud envrionment, is it possible?
... View more
08-22-2023
08:29 AM
Hi, Wanted to know if its possible to create new indexer cluster and add it as peers to the existing cluster to copy all the old buckets on new set of indexes and segregate it once all the old data is available on new one ?
... View more
Labels
- Labels:
-
indexer
-
indexer clustering
04-20-2021
03:47 AM
Hi,
Recently we upgraded our splunk instance to 8.1 and after the upgrade we aren't seeing App name in the application menu.
Did anyone faced similar issue?
... View more
Labels
- Labels:
-
app
-
search head
-
upgrade
04-02-2020
09:13 AM
I just see "splunkd starting" but there are no events for "shutdown complete", what does that mean?
... View more
04-02-2020
08:22 AM
Hi,
We need to provide report, where we need to capture how long Splunk instance was down in past.
Is it possible to capture using internal logs? What Splunk query can we use to get the duration?
Note: Currently Splunk instances are up and running.
... View more
02-26-2020
09:04 AM
Hi,
I have a requirement where I need to add multiple pools for same license stack? Does editing size of the pool cause any loss of data on indexers? Does deleting any existing pool cause any loss of data on indexers?
I received below message when I was trying to delete one of the volume.
"Once the pool is deleted, all of the indexers in the pool will lose their shared indexing volumes. Do you still want to delete this pool?
... View more
Labels
- Labels:
-
indexer
02-13-2020
06:50 AM
Currently we just have one search head over indexer cluster with 2 peers on it, we were asked to add additional standalone indexer have data of another environment to the same search head.
Will this cause any performance impact as search head has more splunk indexers to search from.
... View more
02-12-2020
06:02 PM
Hi,
Wanted to know if there could be any impact on performance of a search head, if we add many indexer peer to a single search head.
... View more
02-05-2020
10:03 AM
Hi,
We have requirement where we were asked to retrieve 3 month old data from frozen state into splunk.
We need inputs for:-
1) How to identify the buckets inside frozen data for that particular index and that time frame?
2) Will there be impact on indexer performance while thawing the data?
3)Do I need to thaw data on every indexer in cluster?
4)What would be it's impact on cluster.
5)Will it cost on license?
6)Do i have to attach disk on every indexers for thawing data?
7) How will it go back to frozen state
Thanks
Saurabh
... View more
01-28-2020
11:28 AM
Thanks, will try same.
... View more
01-28-2020
10:19 AM
Got it.
if i have to keep this in long(2-3 days) condition, should I calculate the data ingestion per day and add that much disk space to colddata disk as temp solution?
... View more
01-28-2020
09:49 AM
I will be swapping disks, therefore for brief time there won't be any disk available to splunk for frozen data. Will it cause any issue if Splunk couldn't find the disk to place the frozen data for some time.
... View more
01-28-2020
09:16 AM
Hi, We are reaching 100% of disk space for frozen data. I wanted to know how can we move data to a bigger disk without turning off Splunkindexers?
... View more
Labels
- Labels:
-
indexer
-
resource usage
11-14-2019
11:27 AM
Try below query:-
index=dlp
| join username
[|inputlookup users.csv |fields username]
|table username, machine_name, ip_address
I am assuming your outer result must have field with username.
... View more
11-14-2019
10:53 AM
Hi,
We have a situation where we want to have multiple pools in our license master and each pool should index data from specific host.
We don't want multiple indexer OR license master to achieve this.
Please let me know if such scenarios are possible.
... View more
08-23-2019
09:40 AM
Yes, If a JIRA ticket modified 3 times you will see 3 events from the same ticket.
... View more
08-23-2019
07:39 AM
reduce the interval for fetching results.
... View more
08-22-2019
01:13 PM
Don't simply type |Jira, trying writing entire query which i gave you.
|jira jqlsearch "text ~ "splunk""
This should pull all the tickets in JIRA which have splunk in them.
... View more
08-22-2019
11:47 AM
You need to provide JIRA connection detail in apps/JIRA/bin/config.ini
than run |jira jqlsearch "text ~ "splunk""
This should give you results.
... View more
08-22-2019
10:02 AM
Hi,
We are seeing high memory usage from certain set of people. We wanted to limit their search memory usage.
Is it possible to make changes in limits.conf and target to only specific role in splunk?
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
08-22-2023
07:51 PM
|
