Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About dbot2001
dbot2001
Path Finder
Member since:
06-28-2019
a month ago
Community Statistics
| Posts | 17 |
| Solutions | 0 |
| Karma Given | 45 |
| Karma Received | 1 |
| Member Since | 06-28-2019 |
Activity Feed
- Karma Max Value for bucket ID for reed_kelly. 10-23-2023 10:52 AM
- Got Karma for Re: Copy Dashboard from one App to another. 09-29-2023 06:28 AM
- Posted Re: Issues fetching Exchange Online message tracking logs (HTTP 401 Client Error) since 1.4.2023 on All Apps and Add-ons. 04-19-2023 08:18 AM
- Karma Re: Issues fetching Exchange Online message tracking logs (HTTP 401 Client Error) since 1.4.2023 for amyers16. 04-19-2023 08:17 AM
- Karma Re: Issues fetching Exchange Online message tracking logs (HTTP 401 Client Error) since 1.4.2023 for Wiessiet. 04-17-2023 01:31 PM
- Karma Re: Issues fetching Exchange Online message tracking logs (HTTP 401 Client Error) since 1.4.2023 for Wiessiet. 04-17-2023 01:20 PM
- Karma How can I fix Issues fetching Exchange Online message tracking logs (HTTP 401 Client Error) since 1.4.2023? for rvaglid. 04-17-2023 01:20 PM
- Karma Re: Why do I get the following messages in splunkd.log after installing Splunk Universal Forwarder in a GCP instance? for burwell. 04-15-2023 06:54 AM
- Karma Re: What Capabilities do I need to enable so a user can change sharing permission on their searches? for mattness. 01-20-2023 08:00 AM
- Karma Re: Question about "run as" (Owner or User ) for saved searches. Missing in version 7. for the_wolverine. 01-20-2023 07:43 AM
- Karma Re: Limit choices in default TIMEPICKER for spammenot66. 01-04-2023 10:37 AM
- Karma Re: Limit choices in default TIMEPICKER for gmorris_splunk. 01-04-2023 10:37 AM
- Karma Re: how to group events per weeknumber ? for yannK. 11-04-2022 10:40 AM
- Karma Re: How to drill down from a Splunk dashboard to an external URL? for wschulze. 10-04-2022 09:29 AM
- Posted Re: Copy Dashboard from one App to another on Dashboards & Visualizations. 07-11-2022 09:05 AM
- Karma Re: Copy Dashboard from one App to another for smoir_splunk. 07-11-2022 09:03 AM
- Karma How do I add a metrics index into the Analytics workspace? for govardha. 02-28-2022 10:37 AM
- Posted Re: Override default INDEXED_EXTRACTIONS on Getting Data In. 02-24-2022 09:55 AM
- Karma How to override default for INDEXED_EXTRACTIONS? for lumpymilk. 02-24-2022 09:55 AM
- Karma Re: Low ingestion thruput without queues blocked. for to4kawa. 02-23-2022 07:29 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
04-19-2023
08:18 AM
That is very helpful, saves us all the time in trying that as a workaround. Thank you!
... View more
07-11-2022
09:05 AM
1 Karma
This is the answer. What version of Splunk was this feature implemented?
... View more
02-19-2021
05:56 AM
Run "Repair' or reinstall the Splunk Application
... View more
02-02-2021
02:00 PM
Found a way to spot the troublesome csv. (worked for me, anyway) requires CLI. The grep looks for special characters in the file. find $SPLUNK_HOME/etc -name "transforms.conf" | xargs grep -l -P -n "[\x80-\xFF]"
find $SPLUNK_HOME/etc -name "*.csv" | xargs grep -l -P -n "[\x80-\xFF]" Another thing that helped track down the issue was run the rest call as a Splunk search, then look at the search.log | rest /services/data/transforms/lookups
... View more
10-22-2020
10:19 AM
Are these DEBUG settings to be done on the UF on the windows host? How does the manifest file get installed to resolve this?
... View more
08-04-2020
01:31 PM
The transaction_uuid field added to the results works for bolt task, I haven't figured out how any of the other alert actions are to be used
... View more
08-04-2020
10:50 AM
It appears transaction_uuid is required. Not sure if this is supposed to come from alert metadata, but adding it to Splunk results e.g. | eval transaction_uuid="bolttest_" . host . "_" .strftime(now(),"%s") seems to work
... View more
07-31-2020
12:13 PM
Getting an error code=5 whenever running an alert action from Puppet Report Viewer action=puppet_generate_detailed_report - Alert action script returned error code=5 First time setup, how do I troubleshoot this?
... View more
- Tags:
- Puppet Report Viewer
Labels
- Labels:
-
configuration
-
troubleshooting
07-17-2020
06:10 AM
The default polling frequency for Splunk Add-on for CrowdStrike is one hour. (3600) Can this be changed to pull data more frequently? 10m (600) or 5m (300) ?
... View more
Labels
- Labels:
-
configuration
02-24-2020
02:39 PM
Are there any release notes available for Thinkst Canary AddOn For Splunk?
Any concerns in moving from 1.1.7 to 1.1.11 ?
... View more
02-11-2020
06:25 AM
Are you using AWS Cloudwatch agent to forward application logs to the centralized location?
... View more
11-07-2019
07:26 AM
I noticed there is a bit of django in the app, which will not work in 7.3.
(appserver/templates/base.html)
Is that django template actually in use?
Any plans to certify against 7.3+ ?
Thanks
... View more
10-31-2019
10:23 AM
Any reason this may not be compatible on newer versions of Splunk? (7.2, 7.3, 8.0) ?
... View more
09-23-2019
07:06 AM
You can override the Host override in transforms.conf to force a domain suffix
Beware: You may need to adjust the REGEX to remove any existing domain suffix prior to forcing one on this way.
local/transforms.conf
[nmon_data_hostoverride]
FORMAT = host::$1.yourdomain.com
... View more
08-08-2019
08:32 AM
The '|rest' command is part of SPL, it is a generating command. You do not need to be remote, it is used in the UI.
... View more
