About agrant

agrant · ‎06-11-2013

Looks like there is either two missing transforms in default/transforms.conf or the props.conf should be corrected not to call the two _2 transforms. Namely: ciscosyslog-src_dom_addr_port_2, ciscosyslog-dst_dom_addr_port_2 Perhaps this was a copy/paste error by the developer. For now I'm going to simply remove the transform calls.

agrant · ‎05-04-2012

I noticed this same issue on some older Solaris machines. Seems some shell implementations don't have a $USER. If $USER doesn't exist in the manner you start the splunk instance then the splunkforwarder won't start up. So I just added the serverName=$HOSTNAME definition to the general stanza in the local/server.conf file.

agrant · ‎01-11-2012

sed -i "s/^~$//" webintelligence/default/macros.conf Just noticed after 4.3 upgrade more errors and warning.. one of which was that the macros.conf file contains a ~ tilde at the end of the file.

agrant · ‎11-09-2011

I think I'm looking for the same thing. The announcement was back in 2007, so probably too old. I have a client with some documentation relating to Splunk 2.2.6 for TrueSight

Posts	4
Solutions	1
Karma Given	4
Karma Received	1
Member Since	‎08-23-2011

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

typo in macros.conf

Re: Is there an example transforms for Splunk for ...

Re: CentOS Splunk Not Starting On Boot

typo in macros.conf

Re: Coradiant TrueSight API export format