Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About gmenghini
gmenghini
New Member
Member since:
06-16-2016
06-05-2020
Community Statistics
| Posts | 5 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 06-16-2016 |
Activity Feed
- Posted Re: how do you configure the search head so it sends 2 summary index data to 2 separate indexer on Knowledge Management. 01-18-2017 01:39 AM
- Posted how do you configure the search head so it sends 2 summary index data to 2 separate indexer on Knowledge Management. 01-09-2017 06:22 AM
- Tagged how do you configure the search head so it sends 2 summary index data to 2 separate indexer on Knowledge Management. 01-09-2017 06:22 AM
- Tagged how do you configure the search head so it sends 2 summary index data to 2 separate indexer on Knowledge Management. 01-09-2017 06:22 AM
- Posted Re: SecKit for geolocation with Maxmind: Why am I getting error "unknown command"? on All Apps and Add-ons. 06-19-2016 11:01 PM
- Posted Re: SecKit for geolocation with Maxmind: Why am I getting error "unknown command"? on All Apps and Add-ons. 06-16-2016 10:20 PM
- Posted Re: SecKit for geolocation with Maxmind: Why am I getting error "unknown command"? on All Apps and Add-ons. 06-16-2016 01:46 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 |
01-18-2017
01:39 AM
Hi Somesoni2
Many thanks for your answer. We tried your proposal, however, it does not work. Do we have to consider something special when executing the collect statement? Or something when configuring the summary index? We do not receive any error message.
Generally, we wonder how other apps handle it? We basically just want to collect the results of an app into a specific summary index. And the search head with the app is connecting to different indexer.
Again, thanks for your appreciated help!
Best regards
... View more
01-09-2017
06:22 AM
I have a problem with the configuration/definition of 2 separate summary indexes for storing data on to 2 separate indexer. Let me try to explain the situation and the problem in detail:
1) I have 2 separate Indexer (2 separate Servers). Lets say Indexer A and Indexer B.
2) I have one Search Head (1 Server) with 2 separate Apps. Lets say App 1 and App 2.
3) In App 1 I want to collect the results of my searches in a „summary index AB“ on Indexer A.
4) In App 2 I want to collect the results of my searches in a „summary index BC“ on Indexer B.
I know that the indexer server’s names can be configured in the output.conf file. However, I do not know how to define server specific summary indexes. That is, how can I configure that the results in App 1 are collected in summary index AB on Index A, and analogously for the results in App 2? As far as I understand, in the inputs.conf you cannot define the name of a summary index. Or am I wrong? I hope my description is understandable…
Your help is very much appreciated!
... View more
06-19-2016
11:01 PM
I could solve the problem - it works now! The problem was the missing GeoLite mmdb in the data folder of the app. It seems to be that some information (e.g. city, country etc.) comes from this database and I only had the GeoIP mmdb for getting further details (e.g. ISP etc.).
... View more
06-16-2016
10:20 PM
@rfaircloth: As explained in one of your earlier posts, I used the back tick ` when executing the command. I used exactly the spl from the documentation and tried also many other options - still the same error. However, I just realized the error message comes from the splunk indexer (search head and indexer are on different servers). Do I have to install the app also on the indexer or adapt some configuration? Many thanks.
... View more
06-16-2016
01:46 AM
I am getting the same error (Script for lookup table 'SecKitIPLocation' returned error code 1)? How did you solve the problem?
The python script is located here:/opt/splunk/etc/apps/SecKit_SA_geolocation/bin
and the corresponding Maxmind Data here: /opt/splunk/etc/apps/SecKit_SA_geolocation/data
Any suggestions are welcome.
Thanks.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
