Hello All, I have created a Indexer cluster. In my master indexer I created one Index and added some data (/etc/master-app/_cluster/local). and pushed the index to all the peers. Index is replicated in all the indexer But data is showing in only master index. Now I want to add some data to all my indexer. What should I do? Thanks Vikash Gupta ... View more

I have created a 5 node index cluster and its working fine. Now I created an index in master indexer and added some data. But I am not able to replicate that index to all the slave indexer. I added repFactor = auto to my indexes.conf file in /opt/splunk/etc/apps/search/local/ directory. but not working then I created a same file in /opt/splunk/etc/system/local as well, But again its not working. Can someone suggest where I am doing wrong. Below is my indexes.conf file [test] coldPath = $SPLUNK_DB/test/colddb enableDataIntegrityControl = 0 enableTsidxReduction = 0 homePath = $SPLUNK_DB/test/db maxTotalDataSizeMB = 512000 thawedPath = $SPLUNK_DB/test/thaweddb repFactor = auto ... View more

Can someone tell what was the latest version available in January 2018. And What are the new features comes after January 2018 till now. Thanks ... View more

Hi, For my learning purpose, I have installed splunk and configured universal forwarder. Now I want to Hide/mask some data. But not able to do, Below are the required details. Please let me know anything else is needed. Sample log SERVICE NOTIFICATION: 9123456780;www.test.com;Kibana_Service_Check;CRITICAL;notify-service-by-email;connect to address xx.xx.xxx.xxx and port 5601: Connection refused Sample Mobile Number(9123456780) need to masked Filed details: Contact_group=9123456780 props.conf [nagios] TRANSFORMS-anonymize = Contact_group-anonymizer transforms.conf [Contact_group-anonymizer] REGEX = (?m)^(.*)Contact_group=^[\[\]\d\s\w]+.\s(?<Contact_group>[a-z]+). FORMAT = $1Contact_group=###########$2 DEST_KEY = _raw ... View more

In the below log, I need to extract genres from the log. In a single log there are multiple genres. Such as for the below log , we have 3 genres ---( Comedy, Drama and Romance). My requirement is to map genres with ID. 0,"[{""id"": 35, ""name"": ""Comedy""}, {""id"": 18, ""name"": ""Drama""}, {""id"": 10749, ""name"": ""Romance""}, {""id"": 10770, ""name"": ""TV Movie""}]",http://www.hallmarkchannel.com/signedsealeddelivered,231617,"[{""id"": 248, ""name"": ""date""}, {""id"": 699, ""name"": ""love at first sight""}, {""id"": 2398, ""name"": ""narration""}, {""id"": 5340, ""name"": ""investigation""}, {""id"": 34051, ""name"": ""team""}, {""id"": 173066, ""name"": ""postal worker""}]",en,"Signed, Sealed, Delivered","""Signed, Sealed, Delivered"" introduces a dedicated quartet of civil servants in the Dead Letter Office of the U.S. Postal System who transform themselves into an elite team of lost-mail detectives. Their determination to deliver the seemingly undeliverable takes them out of the post office into an unpredictable world where letters and packages from the past save lives, solve crimes, reunite old loves, and change futures by arriving late, but always miraculously on time.",1.444476,"[{""name"": ""Front Street Pictures"", ""id"": 3958}, {""name"": ""Muse Entertainment Enterprises"", ""id"": 6438}]","[{""iso_3166_1"": ""US"", ""name"": ""United States of America""}]",2013-10-13,0,120,"[{""iso_639_1"": ""en"", ""name"": ""English""}]",Released,,"Signed, Sealed, Delivered",7.0,6 ... View more