Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About philrego
philrego
Path Finder
Member since:
06-19-2019
06-05-2020
Community Statistics
| Posts | 14 |
| Solutions | 2 |
| Karma Given | 2 |
| Karma Received | 0 |
| Member Since | 06-19-2019 |
Activity Feed
- Karma Re: How do I see all Hosts? for jacobpevans. 06-05-2020 12:50 AM
- Karma How to show more than 50 events on a page in 6.x? for davidpaper. 06-05-2020 12:47 AM
- Posted Pagnation not working properly and showing on wrong part of screen. on Splunk Enterprise. 10-01-2019 07:00 AM
- Tagged Pagnation not working properly and showing on wrong part of screen. on Splunk Enterprise. 10-01-2019 07:00 AM
- Tagged Pagnation not working properly and showing on wrong part of screen. on Splunk Enterprise. 10-01-2019 07:00 AM
- Posted How do I see all logs in a 1 minute time frame? on Getting Data In. 10-01-2019 06:39 AM
- Tagged How do I see all logs in a 1 minute time frame? on Getting Data In. 10-01-2019 06:39 AM
- Tagged How do I see all logs in a 1 minute time frame? on Getting Data In. 10-01-2019 06:39 AM
- Tagged How do I see all logs in a 1 minute time frame? on Getting Data In. 10-01-2019 06:39 AM
- Tagged How do I see all logs in a 1 minute time frame? on Getting Data In. 10-01-2019 06:39 AM
- Posted Re: Increase results per page on Splunk Search. 10-01-2019 06:36 AM
- Posted Re: How do I find the "Event" that directly proceeds the selected "Event"? on Splunk Search. 08-06-2019 06:30 AM
- Posted Re: How do I see all Hosts? on Getting Data In. 07-30-2019 06:35 AM
- Posted Re: How do I see all Hosts? on Getting Data In. 07-30-2019 06:34 AM
- Posted Re: How do I see all Hosts? on Getting Data In. 07-29-2019 08:43 PM
- Posted How do I see all Hosts? on Getting Data In. 07-29-2019 10:28 AM
- Tagged How do I see all Hosts? on Getting Data In. 07-29-2019 10:28 AM
- Posted Re: How do I find the "Event" that directly proceeds the selected "Event"? on Splunk Search. 07-24-2019 06:09 AM
- Posted Re: How do I find the "Event" that directly proceeds the selected "Event"? on Splunk Search. 07-24-2019 06:08 AM
- Posted How do I find the "Event" that directly proceeds the selected "Event"? on Splunk Search. 07-23-2019 01:15 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
10-01-2019
07:00 AM
I don't see the scroll bar at the bottom of the page. I have to move my cursor from the bottom of the page to the top each time I want to change the page. Additionally the "dots" in the pagination, where I can select which page to go to is disabled. Why would this be disabled. I want to go to a specific page. How do I get to the last page without clicking a bunch of times?
<li class="disabled"><a class="dots">...</a></li>
... View more
10-01-2019
06:39 AM
I need to see all the logs at 9:12AM.
Splunk is only showing me 1000 results.
I need to see all the logs at 9:12AM there's nothing further I can filter.
How do I do this? Why can't I see all my results by default?
... View more
08-06-2019
06:30 AM
You can't. If you want to see the event that directly precedes the event you will need to remove all your filters and manually look through the rows one by one. It can take hours but it's the only way if you want to use Splunk.
... View more
07-30-2019
06:35 AM
It returned 79,227 events. Could I possibly have that many hosts? I don't need access to more than like 30.
... View more
07-30-2019
06:34 AM
Means when you click on the hosts and click "View events" or one of the other options. It opens another tab and immediately closed. | tstats values(host) only shows 100 hosts and none are the ones I use. Same thing with | tstats count latest(_time) as _time by host. Cant click on the results and it doesn't show the hosts I use.
... View more
07-29-2019
08:43 PM
| top limit=0 host
worked but
| tstats values(host)
only entering that in the search showed a bunch of hosts i've never seen and couldn't open at all.
... View more
07-24-2019
06:09 AM
I'm not going to enter that huge line just when I want to see the preceding event. That doesn't even do anything close to what I've asked. Please delete.
... View more
07-24-2019
06:08 AM
Click on. By clicking
... View more
07-23-2019
01:15 PM
Let's say I perform this search:
index=mysecretindex host=mysecrethost* source="/my.log" error-3005
Then say I select an "event".
How do I find the "event" that directly precedes (ordered by time) the selected "event"?
... View more
07-03-2019
12:17 PM
I got access to splunk. I tried the above answers and they don't work. When I ssh to the IP address I get the expected response, but when I put host=123.0.0.1 index=mysecretindex. I get no results. If indexes aren't secret how do I find the index I have access to using Splunk? Each time I have to go to my notes and copy and paste. The host name is not the full domain name, it's the first portion of the domain. No way I would know the host name unless I search with the index or get lucky trying host names. After all this the logs are being filtered (only fatal logs) and I can't see the request and response I need to fix a defect.
... View more
07-03-2019
11:10 AM
No it's not possible. To find logs with splunk follow this procedure
Get Splunk access (this needs to be updated) and find the secret prod URL and non prod URL to login.
Enter the secret Index key. Look at the left panel to find the secret string for the Hosts.
Enter source (file path) using left panel or complete path to the file.
Note: The domain name and the IP address will NOT work. You need the secret host string that's listed on the left side, after searching with the secret index.
Note: Complete logs may not be shown.
... View more
06-19-2019
10:37 AM
I know how to ssh into the server and view this log. I want to know how I can easily view this log in Splunk without having to memorize abstractions.
So given only this information how do I see the log in Splunk?
... View more
- Tags:
- splunk-enterprise
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:04 AM
|
