i am getting 2 different errors on my Splunk server - please see attached for errors, unsure what is wrong thanks for all your help ... View more

deploymentclient.conf [target-broker:deploymentServer] targetUri = splunk.domain.com:8089 outputs.conf [tcpout] server = splunk.domain.com:8089 [tcpout-server://splunk.domain.com:8089] inputs.conf [default] host = MYPC257 [script://$SPLUNK_HOME\bin\scripts\splunk-wmi.path] disabled = 0 [WinEventLog://Security] index=security current_only=1 evt_resolve_ad_obj=0 renderXml=1 disabled=0 Logon Failures index=windows LogName=Security EventCode=4625 | table _time, Workstation_Name, Source_Network_Address, host, Account_Name Monitor for Administrative and Guest Logon Failures index=windows LogName=Security EventCode=4625 (Account_Name=_administrator OR Account_Name=guest) | stats count values(Workstation_Name) AS Workstation_Name, Values(Source_Network_Address) AS Source_IP_Address,values(host) AS Host by Account_Name | where count > 3 ... View more

if i enter this url https://localhost:8001/ i get the snapshot below here is my web.conf [settings] enableSplunkWebSSL = 1 privKeyPath = serverCert = startwebserver =1 mgmtHostPort = 192.168.101.148:8001 splunk-launch.conf # Splunkweb service name SPLUNK_WEB_NAME=splunkweb SPLUNK_BINDIP=192.168.101.148:8001 i have a Windows 2008 Server and my Splunk version is 6.5.1 ... View more

i installed Splunk on my Windows 2008 server. i added the DNS name and IP to my DNS server but when i enter the DNS name, it takes me to IIS7 site. what am i doing wrong? ... View more

i installed Splunk server on my WSUS server (Windows Server 2008) so i need to change the default port. i made the change in C:\Program Files\Splunk\etc\system\local\web but when i check on Splunk to launch the program it points to http://localhost:8000/ WEB config [settings] httpport = 12300 mgmtHostPort = 127.0.0.1:12389 if i manually type in http://localhost:12300 i get to login page after i enter the admin and changeme - i get 500 page server error This page was linked to from http://localhost:12300/en-US/account/login?return_to=%2Fen-US%2F. ... View more