Activity Feed
- Karma Re: Errors after Microsoft Azure Add on for Splunk upgrade for jconger. 11-17-2021 04:17 AM
- Karma Re: Scheduled Search not triggered with message Defer search "summary - AD logins by username, workstation" during searchable rolling for rbal_splunk. 06-05-2020 12:49 AM
- Karma Re: Why is the ES Incident Review page still lists deleted Correlation Searches in the Multiselect box "Correlation Search Name"? for rphillips_splk. 06-05-2020 12:49 AM
- Karma Why is the ES Incident Review page still lists deleted Correlation Searches in the Multiselect box "Correlation Search Name"? for rphillips_splk. 06-05-2020 12:49 AM
- Karma Re: Why is _time different between apps for the same data in Splunk Cloud? for lguinn2. 06-05-2020 12:48 AM
- Karma Why is an indexer in a cluster reporting "CMMessages - got genid thats invalid or out of range, setting to INVALID_GENID"? for gpaks. 06-05-2020 12:48 AM
- Karma Re: Why is an indexer in a cluster reporting "CMMessages - got genid thats invalid or out of range, setting to INVALID_GENID"? for dshakespeare_sp. 06-05-2020 12:48 AM
- Karma Re: Cannot delete saved searches of a user that no longer exists? for cmerriman. 06-05-2020 12:48 AM
- Karma Re: Cannot delete saved searches of a user that no longer exists? for arowsell_splunk. 06-05-2020 12:48 AM
- Karma Issues with Splunk "scrub" command not anomymizing data correctly for dshakespeare_sp. 06-05-2020 12:48 AM
- Karma Re: Issues with Splunk "scrub" command not anomymizing data correctly for dshakespeare_sp. 06-05-2020 12:48 AM
- Got Karma for Re: Cannot delete saved searches of a user that no longer exists?. 06-05-2020 12:48 AM
- Got Karma for Re: Cannot delete saved searches of a user that no longer exists?. 06-05-2020 12:48 AM
- Got Karma for Cannot delete saved searches of a user that no longer exists?. 06-05-2020 12:48 AM
- Got Karma for Cannot delete saved searches of a user that no longer exists?. 06-05-2020 12:48 AM
- Got Karma for Cannot delete saved searches of a user that no longer exists?. 06-05-2020 12:48 AM
- Got Karma for Cannot delete saved searches of a user that no longer exists?. 06-05-2020 12:48 AM
- Karma How to clear indexer overage warnings so i can perform searches? Getting error in "litsearch" command. for jbleich. 06-05-2020 12:47 AM
- Karma Re: Is there a way to see a coworker's open support case status? for somesoni2. 06-05-2020 12:47 AM
- Karma Is there a way to see a coworker's open support case status? for jkeellogic. 06-05-2020 12:47 AM
Topics I've Started
Subject | Karma | Author | Latest Post |
---|---|---|---|
4 | |||
0 | |||
3 | |||
3 | |||
4 | |||
0 | |||
0 | |||
0 | |||
1 |
03-01-2019
08:09 AM
When raising this with Splunk Support please reference SOLNESS-15144
... View more
09-19-2018
03:09 AM
If you do see this issue please raise a support case and reference internal splunk bug number ADDON-12867 to get an update
... View more
11-03-2016
07:30 AM
2 Karma
That would work, however I am a cloud customer so do not have access via command line 😞 but good answer!
... View more
11-03-2016
04:47 AM
4 Karma
An ex-colleague user has been removed from access controls however their saved searches linked with his username are still running and i am seeing errors of orphaned searches. I am an Admin but cannot delete these searches. Is there another way?
... View more
- Tags:
- splunk-cloud
01-19-2016
04:00 AM
2 Karma
Please add the config to your local authorize.conf file to the one below, restart splunk and now try to search
srchIndexesAllowed = ;_
You can find more on this config in the link below
http://docs.splunk.com/Documentation/Splunk/6.0/admin/authorizeconf
... View more
01-19-2016
04:00 AM
Why does the search index=_internal not return any results?
... View more
08-19-2015
03:43 AM
Hi,
I have checked and it looks like your email address has been verified with our system.
Thanks,
Vinay
... View more
07-03-2015
02:59 AM
Hi,
Currently this a limitation when migrating to SHC and we are working on fixing this in our next major release of Splunk. For reference this issue is related to SPL-96384.
Thanks,
... View more
06-02-2015
07:45 AM
2 Karma
@ somesoni2 is correct you will need to be assigned to the same entitlement as your colleague to view and update each others cases.
... View more
06-02-2015
07:40 AM
6 Karma
Hi,
Splunk had a bug in version 5.0.0 - 5.0.4 where regular reset licenses for OEM licenses would not work. Therefore you will need to contact Splunk Support to get a specific license reset for your OEM license.
Thanks,
... View more
06-02-2015
07:38 AM
3 Karma
I have an OEM License and my license has been violated 5 times. I received a license reset from my account manager today however it is not working for me.
I have tried installing it via "Copy and paste" and uploading the license file.
I am running version 5.0.3 - is there a specific license reset key I need for my OEM license?
... View more
Labels
- Labels:
-
license
03-18-2015
03:57 AM
1 Karma
Hi Mike,
I can see there are two email addresses in your account. I will email you directly about this change.
... View more
02-23-2015
03:06 AM
6 Karma
There are 3 ways to become a Authorized contact with Splunk Support.
1. Colleague to raise a case
If you have a colleague who is currently an entitled/authorized contact you can get them to raise a Support Case to add yourself to your accounts entitlement. Please make sure you have registered on splunk.com before hand.
2. Ask your Support Portal Admin
If your colleague is currently a Support Portal Administrator he/she will be able to assign you to your entitlement, if you encounter issues is in doing so please refer to 1.
3.Contact your Sales Representative
If you know who your Account Manager is please ask them to add you to your entitlement. Please make sure you have registered on splunk.com before hand.
Please see other similar posts:
Want to know how to become a Support Portal Admin
Want to know how to raise a Splunk Support case
Hope this helps!
... View more
02-23-2015
02:55 AM
3 Karma
Hi,
I am not assigned to my Accounts Enterprise Entitlement and need to raise a support case. How can i become an authorized contact?
... View more
02-23-2015
02:49 AM
13 Karma
There are 3 ways to file (or raise) a successful Support Case with Splunk. However you will need to be assigned to your Companies active Enterprise or Global Entitlement before doing so otherwise your case may navigate into our Community Queue which is not often monitored by our Engineers.
1. Support Portal (the best way to file a case)
Login into "splunk.com" and navigate to "Support & Services" on the top left of the page and then click onto "Support Portal" on the drop down list
2. Email
You can email us at "support@splunk.com" which will file a default P3 case. Please note your email address must be associated with your accounts entitlement.
3. Phone
You can call our Support line on (855) SPLUNK-S or you can find local numbers here
Hope this helps!
... View more
02-23-2015
02:32 AM
4 Karma
I am assigned to my accounts support entitlement however i am not sure what the process is to file a support case?
... View more
- Tags:
- entitlement
- support
10-01-2014
04:22 AM
2 Karma
Yes this bug SPL-90600 has now been fixed in our latest release:
http://docs.splunk.com/Documentation/Splunk/latest/ReleaseNotes/6.1.4#Highlighted_Issues
... View more
10-01-2014
04:21 AM
1 Karma
This bug SPL-90600 has now been fixed in our latest release:
http://docs.splunk.com/Documentation/Splunk/latest/ReleaseNotes/6.1.4#Highlighted_Issues
... View more
09-17-2014
02:46 AM
3 Karma
This is related to http://answers.splunk.com/answers/154984/why-time-range-picker-on-default-splunk-6-1-x-ui-shows-earliest-time-cannot-be-greater-than-latest-time-errors.html
The work around is mentioned in the Splunk Answers Post above:
Add the "earliest= and latest=" commands to the search query.
... View more
09-05-2014
04:15 AM
This issue has been fixed in 6.0.6 and planned to be fixed in 6.1.4. The problem is that the bucket is attempting to freeze and due to an error the bucket does not role to frozen. Workaround is to delete/move the bucket manually.
... View more
07-15-2014
04:51 AM
2 Karma
Also please make sure you are an Entitled contact to a valid Entitlement before emailing splunk support or raising a case, otherwise the case will go into a unmonitored community queue. In this case you can call the Support Hotline to contact someone within Splunk Support :
http://www.splunk.com/view/SP-CAAAHJ6
Or contact our Sales Team:
http://www.splunk.com/view/contact-us/SP-CAAAAH7
... View more
05-27-2014
04:46 AM
3 Karma
Being associated to an Entitlement does not give you access to your company's license keys. Only the initial contact who purchased the license within your company has access to view and download the key.
However if you would like to get this transferred to your name for example if the contact who owned the license previously has left the company etc. you will need to contact splunk support via the portal, phone or emailing support@splunk.com to get this visibility assigned to you.
Please note that if you are not yet associated to an Enterprise/Global Support Entitlement then you will need to contact your Sales Rep or get a colleague who is already assigned to an Entitlement to request on your behalf.
Thanks!
... View more
05-27-2014
04:39 AM
I am associated to my Company's Enterprise Entitlement however i do not have visibility to see licenses under "My Licenses" tab. Why is this?
... View more
05-27-2014
04:34 AM
4 Karma
The best way to become one is to contact your Sales Representative at Splunk. Please contact them in regards to this and they will be able to tick you off as one, however you can always raise a support case to get this done.
Please note that if you are not yet associated to an Enterprise/Global Support Entitlement then you will need to contact your Sales Rep or get a colleague who is already assigned to an Entitlement to request on your behalf.
... View more
05-27-2014
04:29 AM
I would like to be able to add and remove my colleagues from my entitlement and i heard i need to be ticked off as a support portal admin. How can i become one?
... View more