About jsalsbur

jsalsbur · ‎08-21-2022

That makes me wonder if you could uninstall an older version manually for instance version 6 and then install version 9 if that would work? That could be scripted I imagine?

jsalsbur · ‎07-05-2022

Good afternoon, I am upgrading from Splunk 8 to 9. And I have a hodgepodge of UFs that are all over the place in versioning. From 6.x all the way to 8. I know you cannot multiple version upgrade, I will need to go 6 to 7 to 8 to 9. My question is this. Are there specific versions that I cannot upgrade from? For instance, does a 6.x need to be upgraded to a specific version of 7 then a specific version of 8 or will any version in the line of upgrades work? I have tried to do some searching but I am not finding the answer to my specific question. Which makes me think the upgrade version, as long as it is in order doesn't matter but I need to make sure because we have several hundred to do. Thanks

jsalsbur · ‎08-05-2019

I have been tasked with creating a Dashboard that will be visible by another team to show the Splunk Linux infra resource status and all the data that entails, but they won't be an admin so I will need to create a dashboard for our search heads and indexes, etc. Would this app work well for that or has anyone else found a better method?

jsalsbur · ‎08-01-2019

Good morning I have been tasked with creating a Dashboard that will be visible by another team to show the Splunk Linux infra resource status and all the data that entails, but they won't be an admin so I will need to create a dashboard for our search heads and indexes. Anyone out there use something as intuitive as the monitoring console for customers?

jsalsbur · ‎07-29-2019

I am trying that right now thanks.

jsalsbur · ‎07-28-2019

Are you still having an issue with this stopping? Did you find a resolution? I ask because I seem to be having the same issue.

jsalsbur · ‎07-28-2019

Good morning We are seeing an issue with the O365 add in for Splunk where the Azure Active Directory stop processing and sending logs. Once we restart Splunk on that particular server it comes back and works again but after a day or so it seems to hang and stop again. The other Workloads still are processing, Just Azure Active Directory stops. Has anyone else seen this and been able to resolve it? Thanks Jason

jsalsbur · ‎06-11-2019

Thank you this helped me accomplish it!!

jsalsbur · ‎06-07-2019

Good afternoon I have a stats count query leading to a single number dashboard. I was wondering if it is possible to make that dashboard interactive to click on then showing another query to show the different sites that is creating the single number ? so I use index=* sourcetype=* sensor=* OR sensor=* OR sensor=* OR |dedup sensor |stats count so my number would be 3 so if that number were to drop to two because a site went down could I click on that number dashboard and bring up a query to check on all three sites?

jsalsbur · ‎06-07-2019

found my own answer, just use stats count, not stats count by..... thanks

jsalsbur · ‎06-07-2019

Good morning I am working on a Splunk dashboard where there's a site with 15 different firewall rules. I want to set up a single number that auto updates and shows that the rules are all active. So it would be green at 15 and anything less, 14 -1 would should as yellow, technically I would like if it drops before the half to go red but I'm fine with green and yellow for now. I am doing index=firewallindexname sourcetyp=firewallsourcetype sensor=rule1 OR sensor=rule=2 and so on This is where I hit the brick wall, I wanna do count- but not the count of the firewall rules used- just the fifteen different ones if they are active.

Posts	11
Solutions	1
Karma Given	1
Karma Received	0
Member Since	‎06-07-2019

Online Status	Offline
Date Last Visited	‎11-12-2024 02:40 PM

Upgrading from 8 to 9 (UF question)- Are there spe...

splunk app for Unix and Linux download

Splunk Linux Infra resource monitoring not using t...

O365 Azure Active Directory add on in Splunk stops...

Interactive dashboard stats count

How to use count for activity updates

Re: Upgrading from 8 to 9 (UF question)

Upgrading from 8 to 9 (UF question)- Are there spe...

splunk app for Unix and Linux download

Splunk Linux Infra resource monitoring not using t...

Re: O365 Azure Active Directory add on in Splunk s...

Re: Azure Active Directory Stops

O365 Azure Active Directory add on in Splunk stops...

Re: Interactive dashboard stats count

Interactive dashboard stats count

Re: How to use count for activity updates

How to use count for activity updates