Hi All, I have a requirement to Monitor whether the Database is running or down and send an alert and this should be monitored at OS level and the Database is running in the Linux OS   Can anyone help me please how to achieve this? ... View more

Hi All I have one query with regards to Log Monitoring Let's say I want to monitor abc.log and the last Updated date of the Log File is Aug 2022 or Sep 2022 and I install the UF in the Log server in Feb 2023 and create inputs monitoring for abc.log Does splunk monitor the old data which is already there in the Log file from Aug or Sep 2022 and show the Logs in Splunk? ... View more

Hello All I got a requirement to Upload Logs to Splunk Out of 5 Hosts 3 are Linux and other 2 are windows The Logs getting picked by Splunk but for Linux but for windows Unable to see Logs from 1st to 9th of every month The timestamp for windows server is 1/09/2022, 2/09/2022 and so on till 9/09/2022 %d in props need date to be two digit but here it is just one digit hence the logs are not getting picked   so tried below props for windows with %e: TIME_FORMAT=%e/%m/%Y %H:%M:%S We apply props using sourcetype in general as it was not working tried props with source but still same issue By the way in our infrastructure props are kept in heavy forwarder and are applied at index time Can anyone help on this please? ... View more

Hi All, I got a request to monitor a log files in splunk. below are the log file name pattern: abc_uat_cpe_220614.log abc_dev_cpe_220615.log abc_train_cpe_220616.log and so on.. I have configured inputs lik shown below: [monitor:///usr/local/bsl_export/abc_*_cpe_*.log] index=abdxj sourcetype=bsl_export:cpe disabled = 0 But i am not getting any logs in splunk checked all the things mentioned below: Splunk service is running spunk user had read access Firewall connections are all good has latest logs files with enough size to read Restarted the splunk service still same issue,  Checked _internal logs under log_level=WARN i see below message: AutoloadBalancedConnectstrategy - Cooked connection to ip timed out But connection is fine as i have checked it already. When i run the below command it gives output as "hangup" splunk list inputstatus props is as below: ########### JIRA link ########### [bsl_export:cpe] ############ Can anyone please help me on this?     ... View more

Hi All, I have a set of folders which are created by the job which runs in the backend and the names of the folders keep changing automatically looks something like below:   hs21dsb:hs54:bsds:hasn542sbsb hshs21:nansh2225:haan53333 and so on.. i want to monitor just the latest folder which is created newly in the list and ignore rest of all folders. how to achieve this in monitor stanza? ... View more

Hi All,   I have around 30 Hosts forwarding logs to splunk.   I have the below same paths in all the servers /data/abc/vault.logs /data/abc/vault_audit.logs /data/xyz/proxy.logs   So I have created an app included inputs with all those above stanzas and pushed the app to all hosts.   So by default all those hosts are sending the above mentioned logs to splunk.   But I want 5 servers to send just the below log but not other logs /data/xyz/proxy.logs How to achieve this?   ... View more