Hello Splunkers, I am facing an issue where lookup data string changes to URL encoding when I double-click on the field. Even after I select other data fields, it continues to remain in URL encoding format. Is there any solution to keep the string data as it is without it changing to URL encoding when double-clicked? Please see the attachment. Thank you in advance for your assistance. ... View more

Hello Splunkers, On many of sites, we are experiencing this Buckets Error.  Does anyone have the same issues? and how can we solve this issue?  I really appreciate about your work will be provided.    Buckets Root Cause(s): The percentage of small buckets (100%) created over the last hour is high and exceeded the red thresholds (50%) for index=_internal, and possibly more indexes, on this indexer. At the time this alert fired, total buckets created=4, small buckets=4 Unhealthy Instances idx3 idx4 ... View more

Hello, Splunkers!! We are configuring Search Head clustering and when we init it, it gives a hostname error. However, init has been configured and so does bootstrap.  Also, there is no problem deploying apps on clusters.  How do I fix the error below?  Huge thanks in advance!   WARNING: Server Certificate Hostname Validation is disabled. Please see server.conf/[sslConfig]/cliVerifyServerName for details. Search head clustering has been initialized on this node. You need to restart the Splunk Server (splunkd) for your changes to take effect. ... View more

Hello Splunkers!! We are upgrading one of our environments from Splunk 8.2.1 to Splunk 8.2.7. When I upgraded and checked 'Monitoring Console', 'Summary' and 'Health Check' are not showing on the menu bar anymore.  Did I miss anything? How do I fix these issues?  I appreciate your work will be provided.    PS. same issue when we upgraded to 8.2.2.2 ... View more

Hello Splunkers!   I am looking for the Splunk Add-on for Ruckus Wireless apps file.    I can't find in the Splunkbase.    Is there any place that I can find 'Splunk Add-on for Ruckus Wireless App'?   Thank you in advance.  ... View more

Hello Splunkers!   is there any figure(numbering) guide for the  Replication Factor and Search Factor on Index clustering settings?   any official guide documentations?   Thank you in advance ... View more

Hello, Splunkers!!  About weeks ago, I posted a question about the errors on AIX and Solaris servers when I install the universal forwarder. But I couldn't get an answer.   Then I found a similar question and used that to solve the problem I have.   Below URL is my question: https://community.splunk.com/t5/Splunk-Enterprise/AIX-and-Solaris-server-error-after-installed-the-universal/m-p/583673#M11431   Below URL is the solution that I used: https://community.splunk.com/t5/Installation/Splunk-Universal-Forwarder-7-3-6-SunOS-sparc-Won-t-Install/m-p/506542       All of this,  I am still getting an error messages from Solaris and AIX.    Error messages are below, 1. Solaris Error   2. AIX Error How should I fix these problems?   Thank you in advance 😄 ... View more

Hello Splunkers!   Here is the case.  We already have clustered indexers on-premise and thinking to get an additional indexer server on our cloud system and adding to the index cluster on-premise.   What would be the considerations and cons?    Thank you in advance 🙂 ... View more

Hello Splunkers!  Recently, I have installed splunkforwarder 8.2.1.  After installation, 2 errors are showing. 1. After installing splunkforwarder 8.2.1 on AIX(7100-05-04-1914) server. Every time I execute ./splunk command on the CLI,  that closed CLI window. The only command that doesn't close the CLI window is ./splunk status. What should I do to fix this problem? 2. When I was installing splunkforwarder 8.2.1 on Solaris (5.10 sn4v spray) server, it gives me a library error and cannot be installed. The error is ld.so.1: splunk : critical : libc.so.1 : version 'SUNWpublic' not found (required by file splunk) ld.so.1: splunk : critical : libc.so.1 : open filed : no such file or directory How can I install from this error? Thank you in advance. ... View more

Hello Splunkers!  I am trying to find a way to set up a cron schedule on DB connect app?  I want to run the schedule every second week of Tuesday of the month.  So, the next schedule should be 02/08/2022, then 03/08/2022, then 04/05/2022 .... We tried super hard to make this work.  Below is what we tried:   I thought this would work then, it shows the next schedule will be on 1/18 not next month.    Any brilliant ideas our Splunkers have??   Thanks in advanced.  ... View more