About eduardo1989

edmondpalcsarbi · ‎02-03-2024

Yes, in the meantime it turned out the default way it to listen on a UNIX Domain Socket and I need to switch with config back to the tcp method. 🙂

eduardo1989 · ‎05-05-2022

Hello All, I have faced interesting issue. I have an ingest time extraction. [extract] REGEX = ^([^\r\n]+)$ FORMAT = message::$1 DEST_KEY = _raw Truncation not the case, I set it to zero and the whole event is not longer than 5000 characters BUT the message field is truncated exactly after 4023 characters. Where it is written that an extracted field cannot be longer than this amount of characters. Thanks.

eduardo1989 · ‎11-18-2021

Yeah I found out it was a MetaData problem. I checked the SourceTypes.data file in the actual db folder and my sourcetype was not prefixed with sourcetype:: and after I changed it fixed my problem. So somehow the data was incorrectly handled. Thanks for the help!

PavelP · ‎04-29-2020

Hello @eduardo1989, there were similar questions recently: https://answers.splunk.com/answers/818393/aws-ta-s3-generic-input-insane-memory-usage.html https://answers.splunk.com/answers/794109/wicked-high-cpu-and-memory-utilization.html You may need to open a support case

eduardo1989 · ‎11-07-2019

Thank you very much for the fast response!

eduardo1989 · ‎11-04-2019

The Java task server was not started because the Java installation was not appropriate, then the precheck was hanging a bit. After the JAVA reinstall it was working. But I found out that the DB connect app use the older version of Python so in the future it will have more problems if the developer(s) not fixing it. BR

Posts	15
Solutions	1
Karma Given	0
Karma Received	1
Member Since	‎10-25-2019

Online Status	Offline
Date Last Visited	‎02-02-2024 09:56 PM

Splunk Universal forwarder management port is clos...

Field truncation at index time

Interesting behaviour

Splunk AWS Add-on consuming all memory and CPU

Splunk 8.0 Website Monitoring python fail

Splunk DB Connect not working with Splunk 8.0.0

Re: Splunk Universal forwarder management port is ...

Field truncation at index time

Re: Interesting behaviour

Re: Splunk AWS Add-on consuming all memory and CPU

Re: Splunk 8.0 Website Monitoring python fail

Re: Splunk DB Connect not working with Splunk 8.0....