×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
- About catch_mili
catch_mili
Explorer
Member since:
07-09-2012
06-05-2020
Community Statistics
| Posts | 62 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 2 |
| Member Since | 07-09-2012 |
Activity Feed
- Got Karma for ExtraHop Application for Database. 06-05-2020 12:46 AM
- Got Karma for Re: Splunk Application Installation. 06-05-2020 12:46 AM
- Posted Re: How to exclude files and folders from monitoring on Getting Data In. 03-22-2013 05:38 AM
- Posted Re: How to exclude files and folders from monitoring on Getting Data In. 03-22-2013 05:35 AM
- Posted Re: How to exclude files and folders from monitoring on Getting Data In. 03-19-2013 06:45 AM
- Posted Re: How to exclude files and folders from monitoring on Getting Data In. 03-19-2013 06:31 AM
- Posted Re: How to exclude files and folders from monitoring on Getting Data In. 03-15-2013 12:51 AM
- Posted Re: Unable to start splunk forwarder service on Getting Data In. 03-15-2013 12:40 AM
- Posted Re: Unable to start splunk forwarder service on Getting Data In. 03-14-2013 06:43 AM
- Posted Unable to start splunk forwarder service on Getting Data In. 03-14-2013 05:39 AM
- Tagged Unable to start splunk forwarder service on Getting Data In. 03-14-2013 05:39 AM
- Tagged Unable to start splunk forwarder service on Getting Data In. 03-14-2013 05:39 AM
- Posted Re: Monitoring OS parameters using Splunk on Splunk Search. 03-12-2013 04:41 AM
- Posted Monitoring OS parameters using Splunk on Splunk Search. 03-12-2013 04:10 AM
- Tagged Monitoring OS parameters using Splunk on Splunk Search. 03-12-2013 04:10 AM
- Tagged Monitoring OS parameters using Splunk on Splunk Search. 03-12-2013 04:10 AM
- Posted Re: RPM detection on Splunk Search. 03-12-2013 01:51 AM
- Posted RPM detection on Splunk Search. 03-08-2013 01:57 AM
- Tagged RPM detection on Splunk Search. 03-08-2013 01:57 AM
- Posted Re: Ms Sql & Oracle Database Monitor on All Apps and Add-ons. 03-06-2013 10:32 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
03-22-2013
05:38 AM
Hi Ayn,
Appericiate, if you give me an example.
Even, I tried this one
[filter:blacklist:file.txt]
regex1 = .*txt
[fschange:/etc]
filters = file.txt
... View more
03-22-2013
05:35 AM
[monitor:///etc]
blacklist = (xyzfile)
didnt worked, If i do any changes it is detected by Splunk, However, I have blacklisted that file.
Pls. help...
... View more
03-19-2013
06:45 AM
[fschange:/]
followLinks=true
pollPeriod=120
index = os
disabled = 0
blacklist = .(txt)$
... View more
03-19-2013
06:31 AM
[monitor:///etc]
_whitelist=(.conf|.cfg|config$|.ini|.init|.cf|.cnf|shrc$|^ifcfg|.profile|.rc|.rules|.tab|tab$|.login|policy$)
_blacklist = .(txt)$
index=os
disabled = 0
I have blacklist .txt files from monitoring, but if I do any modification in File it still shows under file modify Tab.
... View more
03-15-2013
12:51 AM
What will be the syntax if I dont want to monitor /root/folder
below is just an example, assume, I dont want to monitor particular folder under /root
[monitor:///root]
blacklist = .(foldername)$
Will this work ?
... View more
03-14-2013
06:43 AM
I dont see 8089 used by any other application
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 :nrpe *: LISTEN 1321/xinetd
tcp 0 0 :nsca *: LISTEN 1321/xinetd
tcp 0 0 :http *: LISTEN 8343/httpd
tcp 0 0 localhost:oa-system
... View more
03-14-2013
05:39 AM
Unable to start splunk forwarder service, below error returns.
checking mgmt port [8089]: already bound
ERROR: The mgmt port [8089] is already bound. Splunk needs to use this port.
Would you like to change ports? [y/n]:
... View more
03-12-2013
04:41 AM
I have installed one. But how can get all forwarder details on single page.
... View more
03-12-2013
04:10 AM
I am monitoring, couple of servers using Splunk Universal Forwarder.
Hence, I would like to have CPU,MEM,Disk & Network statistics should be monitored by those forwarders.
So that using single dashboard, I come to know all fowarders perfmon details.
How can I do that ?
Thanks an advance.
... View more
- Tags:
- os
- parameters
03-08-2013
01:57 AM
How to detect if new rpm installed in Centos OS using Splunk. OR
How should I monitor rpm -qa in Splunk.
... View more
- Tags:
- search
03-06-2013
10:32 PM
I have installed DB connect & configured accordingly.
Moving ahead, I would looking for below types of activity splunk should detect.
o Failed login
o Create/ Modify in Database
o Create/Modify/Delete table in a database
o Change in Schemas
... View more
03-05-2013
01:32 AM
Further, I would like to monitor files & folders created under C:\ & D:\ drive.
How can I do that.
... View more
03-03-2013
11:23 PM
[fschange:/root]
followLinks=true
pollPeriod=120
index = os
disabled = 0
blacklist = . (tempfile) $
Actually, monitoring /root, under I have one tempfile which I dont want to monitored. But when I do changes its captured by Splunk, not sure where went wrong pasted entry above.
Pls. help.
... View more
03-01-2013
03:09 AM
This is with respect to my earlier post /root monitoring.
Now I am able to captured activities done under /root, But I have one small query That, how can I exclude certain files and folders from monitoring.
Is there any way out ?
Because under /root there are number of files and folders, which I dont want to monitored all of them.
... View more
- Tags:
- file-monitoring
02-25-2013
06:12 AM
Done the changes. Still didnt see changes done under /root
Using splunk-5.0.1-143156-Linux-x86_64.tgz
... View more
02-24-2013
11:12 PM
I want to monitor /root file system of Solaris Sparc.
However, I have made below changes in inputs.conf
[monitor:///root/*]
index = os
disabled = 0
But still, I dont see /root file system visible in nix* dashboard.
Basically, I need to monitor acvities performed under /root. E.g. file creation, changes, deletion & Also hidden files modifications.
... View more
02-15-2013
04:02 AM
I am New to Spluk & installed indexer on windows server & forwarder on Solaris Sparc.
Now I would like monitor below types of
Change in system value
Pkg installation details ( if any new package installed, that should detect by Splunk)
... View more
- Tags:
- solaris11
