We have splunk enterprise 6.5.2. We are trying to access Splunk Rest API curl -u : -k http://:8089/services/alerts/fired_alerts This is the error I get while running the above command with the updated hostname and credentials. curl: (56) Failure when receiving data from the peer Can you suggest what is wrong and do I have to enable anything to access splunk API? ... View more

We have Splunk version 6.5.2 installed back in March 2017. We are observing a problem related to slowness listing observations below: 1. When we write a Splunk query and click on search, it just does not show even the search being started for atleast 10-15 seocnd before it starts showing search is running. 2. when we open Dashboards in the morning, they are being blank for quite some time (say 10-15 seconds) before data pops up. Then, they keep showingthe result for the day. While debugging, we found that the splunk has been crashinmg quite a lot and there are lot of crash reports generated every month. We do not know if they are related but there seems to be problem with splunk server crashing. Let me know if there is a way I can share the crash reprot to be looked at as well. We are also looking at suggestion that can do perfomance tuning of Splunk from DB or from search query perspective. ... View more

Taking an example below, I am looking to be make a regular expression that will give me name of servlet form below (after last slash and first question mark). URL: /shop/mystore/ProductDisplay?urlRequestType=Base Result: ProductDisplay ... View more

We have Splunk enterprise 6.2. We built splunk query that returns me all IP transacting with their country location and we are running it for last 60 minutes. Below is the query for same: sourcetype="WebSphere:HTTPlog" |fields websphere_true_client_ip|dedup websphere_true_client_ip|table websphere_true_client_ip|iplocation websphere_true_client_ip|fields websphere_true_client_ip,Country|dedup websphere_true_client_ip,Country|table websphere_true_client_ip,Country We noticed that some of the IP locations are not reported correctly. Below are example that shows up as US but are actually Australia. IP Location Splunk Country Actual Country 165.225.98.91 United States AUS 165.225.98.64 United States AUS 108.171.134.161 United States AUS 165.225.98.65 United States AUS It seems it does not have correct IP database OR IP database is not refreshed. ... View more