cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
julietjake
Explorer
Member since: ‎05-19-2014
‎06-05-2020
Community Statistics
Posts 4
Solutions 0
Karma Given 1
Karma Received 1
Member Since ‎05-19-2014
Activity Feed
View All

Is it suitable to host the Distributed Management ...

by in Deployment Architecture
‎09-16-2015 05:30 AM
‎09-16-2015 05:30 AM
As part of the architecture course, it was suggested that the Deployer, Cluster Master, License Server and Deployment Server can co-exist on the same server. Would it also be suitable to host the Distributed Management Console on the same server? The data being processed would be less than 50GB per day. There would be an Active/Passive set up to provide resiliency. ... View more

JMS modular input - MQ data format

by in All Apps and Add-ons
‎05-21-2015 05:03 AM
‎05-21-2015 05:03 AM
I'm using the JMS modular input to read IBM MQ messages from a queue. The majority of the messages are read correctly, but if there is a message with a blank 'Data Format' in the RFH2 header, the message is placed to the back out queue with the exception in splunkd.log: /splunk/etc/apps/jms_ta/bin/jms.py" Examine the message data and ensure that it is of the correct format to be parsed as an MQJMS Message. Of course I can look to amend the source system so that the data format is set, but is there anyway within Splunk I can force a default format like MQSTR? ... View more

Does data loss occur when using DBConnect if two r...

by in Deployment Architecture
‎03-31-2015 07:58 AM
‎03-31-2015 07:58 AM
Does data loss occur when using DBConnect if two records have the same timestamp? For instance, if DBConnect only picks up the first record on first pass, would the second record with the identical timestamp be lost at the next polling interval as DBConnect is only looking for records with a later timestamp? Splunk 6.1.5 DBConnect 1.1.6 ... View more

Re: Force Splunk to use TLS 1.2

by in Security
‎01-20-2015 06:59 AM
1 Karma
‎01-20-2015 06:59 AM
1 Karma
http://docs.splunk.com/Documentation/Splunk/6.1.5/Admin/Inputsconf I suspect your question may have been pre-dated 6.1.5, but you can select tls1.2 as the sslVersion in the inputconf. sslVersions = * Comma-separated list of SSL versions to support * The versions available are "ssl2", "ssl3", "tls1.0", "tls1.1", and "tls1.2" * The special version "" selects all supported versions. The version "tls" selects all versions tls1.0 or newer * If a version is prefixed with "-" it is removed from the list * When configured in FIPS mode ssl2 and ssl3 are always disabled regardless of this configuration * Defaults to ",-ssl2". (anything newer than SSLv2) ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM
Karma from
View All
Karma given to
View All