About philwhite

philwhite · ‎06-01-2016

Unfortunately this search does not work on our search head. Thanks.

philwhite · ‎05-24-2016

I am currently running Splunk 6.4.1 and I am tied into our license master but I am getting a licensing message on one of my search heads when saving an Alert. "This scheduled search will not run after the Enterprise Trial License expires". Our license is valid and I am getting no errors on the indexers about exceeded volume, etc. I do not have access to our license master so I can't easily verify what is going on, on that end. Is there anything that I can check so that I don't hit a brick wall in 50 days when it may or may not expire my license?

philwhite · ‎05-05-2016

Thank you.

philwhite · ‎05-04-2016

Is there any reason to use Perfmon over WMI on a Universal Forwarder when monitoring local data? Perfmon gets it's data from WMI anyways, so why add the extra step of using Perfmon when you can just hit up WMI directly? I am considering editing my Windows TA to only use WMI (ie wmi.conf) and turning off perfmon. Does anyone see any issue with this?

Posts	4
Solutions	0
Karma Given	0
Karma Received	0
Member Since	‎05-04-2016

Online Status	Offline
Date Last Visited	‎07-26-2021 09:45 PM

License Error when saving Alert (Valid license)

Is there any reason to use Perfmon over WMI on a u...

Re: License Error when saving Alert (Valid license...

License Error when saving Alert (Valid license)

Re: Is there any reason to use Perfmon over WMI on...

Is there any reason to use Perfmon over WMI on a u...