Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About Koushik_Katta
Koushik_Katta
Explorer
Member since:
12-14-2016
06-05-2020
Community Statistics
| Posts | 15 |
| Solutions | 0 |
| Karma Given | 3 |
| Karma Received | 1 |
| Member Since | 12-14-2016 |
Activity Feed
- Karma Re: How to resolve the indexer file system from reaching the threshold on ? for woodcock. 06-05-2020 12:48 AM
- Karma Re: how to run splunk diag , and what to exclude from the diag for muebel. 06-05-2020 12:48 AM
- Karma Re: how to run splunk diag , and what to exclude from the diag for somesoni2. 06-05-2020 12:48 AM
- Got Karma for Re: how to run splunk diag , and what to exclude from the diag. 06-05-2020 12:48 AM
- Posted Fields parsing issue for tomcat add on on All Apps and Add-ons. 11-24-2017 03:00 AM
- Tagged Fields parsing issue for tomcat add on on All Apps and Add-ons. 11-24-2017 03:00 AM
- Posted Re: Splunk universal forwarder not reporting data from SQL server on Getting Data In. 10-17-2017 07:59 AM
- Posted Splunk universal forwarder not reporting data from SQL server on Getting Data In. 10-17-2017 07:36 AM
- Tagged Splunk universal forwarder not reporting data from SQL server on Getting Data In. 10-17-2017 07:36 AM
- Tagged Splunk universal forwarder not reporting data from SQL server on Getting Data In. 10-17-2017 07:36 AM
- Tagged Splunk universal forwarder not reporting data from SQL server on Getting Data In. 10-17-2017 07:36 AM
- Posted Unable to search Cisco eStreamer logs. How to resolve error "Insufficient permissions to read file" message? on Getting Data In. 02-23-2017 09:15 AM
- Tagged Unable to search Cisco eStreamer logs. How to resolve error "Insufficient permissions to read file" message? on Getting Data In. 02-23-2017 09:15 AM
- Tagged Unable to search Cisco eStreamer logs. How to resolve error "Insufficient permissions to read file" message? on Getting Data In. 02-23-2017 09:15 AM
- Tagged Unable to search Cisco eStreamer logs. How to resolve error "Insufficient permissions to read file" message? on Getting Data In. 02-23-2017 09:15 AM
- Tagged Unable to search Cisco eStreamer logs. How to resolve error "Insufficient permissions to read file" message? on Getting Data In. 02-23-2017 09:15 AM
- Posted Re: how to run splunk diag , and what to exclude from the diag on Knowledge Management. 02-23-2017 09:11 AM
- Posted how to run splunk diag , and what to exclude from the diag on Knowledge Management. 02-21-2017 08:52 AM
- Tagged how to run splunk diag , and what to exclude from the diag on Knowledge Management. 02-21-2017 08:52 AM
- Posted Splunk App for PCI Compliance - Splunk Enterprise: Why is Splunk PCI URL not accessible? on All Apps and Add-ons. 02-01-2017 05:28 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
11-24-2017
03:00 AM
Hi Team ,
We have issue with tomcat add on logs , the fields are not parsing properly , if i use sourcetype=tomcatweb.access host=TOMCAT GET NOT xxx.xxx NOT xx.x*0 . In "interesting fields" i had encounteredfields which are not proper example .
ga
t
p_p_id
s_fid
WT_FPC
If i Run query sourcetype=tomcatweb.access host=TOMCAT , i have seen proper fields like
index
eventtype
linecount .
Kindly let me know how to fix this
... View more
- Tags:
- splunk-enterprise
10-17-2017
07:59 AM
hi Cusello ,
did you installed forwarders from scratch or did you cloned it from another installation?
yes i did it from scratch , installed manually
in both the cases check if hostname in $SPLUNK_HOME/etc/system/local/server.conf and $SPLUNK_HOME/etc/system/local/inputs.conf is correct
host name is correct in both .conf's
have you Splunk internal log files from these forwarders?
yes
if not the problem is connection betwen forwarders and indexers.
this i'm not sure , i think there wouldn't be connection issues , its working for other agents
... View more
10-17-2017
07:36 AM
Hi everyone ,
We have issue with Splunk universal forwarders , we installed recently on SQl servers , i have all inputs.conf and outputs.conf set correctly and there is no error in log data . but its no reporting logs in splunk. Ours is clustered search head pool with 2 search heads , 5 indexers and 5 heavy forwarders . we have forward management console , which generally phone-in to the universal forwarders by pushing some of the apps . In Past i have some other VM's which i faced the same issue , i reinstalled the universal forwarder agent which fixed the issue , but currently its not happening with these SQL servers .
Thanks in advance
... View more
02-23-2017
09:15 AM
we are running on Distributed Search Environment, we have two Heavy Forwarders. i'm actually unable to search estreamer logs so i have noticed this in splunkd.log
"Insufficient permissions to read file='/opt/syslogs/generic/mxwmexc02r/784861.log' (hint: No such file or directory , UID: 0, GID: 0). "
and one more warning message i have encountered "TailReader - File descriptor cache is full (100), trimming... " . Not sure why is this happening in only one forwarder and this is not happening in other?
... View more
02-23-2017
09:11 AM
1 Karma
Hi Muebel , It worked i have disabled some .csv , .dat passwords even
Thanks for the help Muebel.
... View more
02-21-2017
08:52 AM
Hi team ,
I want to run a diag , have seen documentation from
http://docs.splunk.com/Documentation/Splunk/6.5.2/Troubleshooting/Generateadiag
kindly explain me what to exclude from the diag as it is consuming more space
how to upload the diag from that ,
Thanks
... View more
- Tags:
- splunk-enterprise
02-01-2017
05:28 AM
Hi Team ,
We have Splunk App for PCI Compliance - Splunk Enterprise running in our environment with the search head. We have verified the services are up and running,
I can see error in splunkd.log .
"ERROR DataModelEvaluator - Data model 'Security_DSB' was not found." .
The URL is completely down , Kindly help in this .
We have troubleshooted by restarting the splunkd services on that particular PCI server but it doesn't work.
Thanks in advance
... View more
01-23-2017
10:10 AM
Indexer is filled up , i have got the retention policy accoridngly
... View more
- Tags:
- splunkenterprise
01-12-2017
07:04 AM
No he haven't included port , the thing i understood from him is he is trying to create a saved search as per document
http://docs.splunk.com/Documentation/Splunk/6.4.3/RESTTUT/RESTsearches
when he is trying to give splunk.xxxxxx.com/services/search/jobs it is giving 404 Error .
... View more
01-11-2017
06:34 AM
When he is accessing the URLs in the documentation which he is working on REST-API (splunk.xxxxxx.com/services/search/jobs)he was redirected to en-US and given a 404 error
... View more
01-11-2017
06:06 AM
The user have been set to basic_user role, will if i give power user to him will it work
... View more
01-10-2017
08:13 AM
Hi Team ,
We are getting this message in Splunk:
The minimum free disk space (5000MB) reached for /opt/splunk/var/run/splunk/dispatch
Can we delete the files under dispatch or is there any alternate solution? What if delete the files under dispatch as temporary solution, will there be any impact?
Thanks
... View more
01-09-2017
04:45 AM
Can anyone help in this !
... View more
01-06-2017
05:00 AM
Hi Team,
What need to be blacklisted so that the size of .delta and .bundle files will be controlled as the size is increasing abruptly , these files holds the info of all the application and search details.we have nearly 50 applications details which are been redirected into this . will there be any impact .
Thanks in Advance
... View more
12-20-2016
05:39 AM
One of our clients is trying to use REST API services. He is working on a Web/mobile team which is considering an innovation project involving a Splunk integration. Basically, better tracking/early notification of errors so that we can prevent them. We’re attempting to work with the Splunk API, but we can’t seem to connect to the documented endpoints.
All we know from him is that he is getting 404 errors. How to troubleshoot and to rectify this?
thanks in advance.
... View more
