×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
fgilain
Engager
Member since: ‎06-10-2012
‎06-05-2020
Community Statistics
Posts 13
Solutions 0
Karma Given 1
Karma Received 0
Member Since ‎06-10-2012
Activity Feed
View All

Re: Alerting depending on data match from a lookup...

by SplunkTrust in Splunk Search
‎01-07-2014 02:13 PM
‎01-07-2014 02:13 PM
...|lookup cisco_lookup host AS hostname interface |... ... View more

Re: REGEX to discard specific event containing " A...

by in Splunk Search
‎10-02-2013 03:51 AM
‎10-02-2013 03:51 AM
try this as REGEX for the nullQueue: \sAllow\s(?!.*(?:ProxyStrip|ProxyDeny)) or if you also want to include the ' msg="' part: \sAllow\s(?!.*\smsg="(?:ProxyStrip|ProxyDeny)) ... View more

Re: splunk indexing the same files again and again...

by in Getting Data In
‎12-12-2012 10:13 AM
‎12-12-2012 10:13 AM
I finally had to use a splunk forwarder from my source server instead of remote mounting the share with logs...all works now. ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎06-05-2020 02:04 AM
Karma given to
View All