Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About sombhtr239
sombhtr239
Explorer
Member since:
08-17-2020
12-09-2024
Community Statistics
| Posts | 11 |
| Solutions | 1 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 08-17-2020 |
Activity Feed
- Posted Re: Is it not possible to use an ampersand character in Notable Event Next Steps? on Splunk Enterprise Security. 12-08-2024 11:11 PM
- Posted Re: Why is the replication status on distributed search failing with this error "Gave up waiting for the captain to on Deployment Architecture. 08-07-2023 10:26 PM
- Posted Re: Ingestion Latency after updating to 8.2.1 on Splunk Enterprise. 12-27-2021 01:03 AM
- Posted Re: Ingestion Latency after updating to 8.2.1 on Splunk Enterprise. 12-27-2021 01:02 AM
- Posted Unable to receive data vis splunk connect for syslog on Getting Data In. 12-13-2021 06:17 AM
- Tagged Unable to receive data vis splunk connect for syslog on Getting Data In. 12-13-2021 06:17 AM
- Posted Re: Unable to start splunk first time on Knowledge Management. 11-15-2021 03:09 AM
- Posted Re: Unable to start splunk first time on Knowledge Management. 11-11-2021 11:49 PM
- Posted Re: Unable to start splunk first time on Knowledge Management. 11-11-2021 06:34 AM
- Posted Why is there an error when trying to start Splunk first time? on Knowledge Management. 11-11-2021 03:47 AM
- Posted Re: Universal Forwarder sending two sets of Windows Security Logs to two different indexer on Getting Data In. 11-05-2021 02:21 AM
- Karma Re: couldn't send SIGTERM to pid 5632: Operation not permitted for koshyk. 11-05-2021 02:15 AM
- Posted Setup SSL from UF to both Indexer and Deployment Server on Security. 04-26-2021 10:15 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
12-08-2024
11:11 PM
Hi, What do you mean by small (&)......by lowering the fonts?
... View more
08-07-2023
10:26 PM
Hello, None of the above statement hold true for me. Our VM's are hosted in GCP, and we have 3 SH member in the SHC and 3 IDX. The issue is observed only in 1 peer, while the other works fine. Tried the setting mentioned above. Also, removed and reconfigured the problematic SH. The issue persists. If anyone has resolved the issue, please suggest steps to resolve this issue.
... View more
12-27-2021
01:03 AM
Anyone having solution please help
... View more
12-27-2021
01:02 AM
I am also facing the same problem. Server IOPS is 2000, still getting IOWAIT and ingesting latency error very frequently and then it goes away.
... View more
12-13-2021
06:17 AM
Hello, I am trying this for the first time and installed sc4s in my HF server, connected the sc4s with HF using HEC URL and token. As checked I am receiving data for sc4s events from HF. However when the syslog is being forwarded from netscaler over ports not receiving any data. Apart from installation of sc4s and updating the hec url and token, I have enabled UDP port- 514 in iptables to accept data. Really appreciate if anyone can help me in resolving this.
... View more
- Tags:
- Getting Data In
Labels
- Labels:
-
HTTP Event Collector
-
syslog
11-15-2021
03:09 AM
I found this issue more with the server. Every time we reboot the server, it failed to turn on. Finally created a new VM which resolve the problem. Thanks all for your contribution. Issue resolved now.
... View more
11-11-2021
11:49 PM
We are trying to scale up our environment and the other 2 SH peer are running on SE8.0.5, hence tried both 8.0.5 and 8.1.0. Will check /var/log/messages; however already changed permission for /opt/splunk . Tried to run via systemctl as well to No go as of now.
... View more
11-11-2021
06:34 AM
Tried steps already, its still not working. We tried the following to no go: 1) Tried to start splunk as splunk user did not go 2) Kept filesystem with Splunk and tried to start splunk with root did not work. 3) Tried to enable systemctl did not work.
... View more
11-11-2021
03:47 AM
We tried to install splunk 8.1.0 and after untarring the file tried to start splunk both as root and splunk user via /opt/splunk/bin/splunk start
Error comes up as execve: Operation not permitted while running command /opt/splunk/bin/splunkd
Any urgent help is appreciated
... View more
- Tags:
- error
- splunk-search
11-05-2021
02:21 AM
Please try to route the data first based upon your tcpoutputproc, for example: [WinEventLog://System] _TCP_ROUTING = splunkidxA,splunkidxB indexer = A As the data is received in both the indexer, try to drop unecessary event from the indexer using props and transforms. Hope this helps.
... View more
04-26-2021
10:15 AM
Hi , I need to setup SSL for all my UF communicate securely both with my indexer and deployment server. I have gone through the link: https://conf.splunk.com/session/2015/conf2015_DWaddle_DefensePointSecurity_deploying_SplunkSSLBestPractices.pdf , which is definitely useful. However need to know can I use the same certificate for outputs.conf and server.conf
... View more
Labels
- Labels:
-
SSL
