Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About Lorenzo1
Lorenzo1
Path Finder
Member since:
07-14-2022
01-01-2023
Community Statistics
| Posts | 29 |
| Solutions | 0 |
| Karma Given | 16 |
| Karma Received | 0 |
| Member Since | 07-14-2022 |
Activity Feed
- Posted Re: BOTSv3 Setup issues on #Random. 01-01-2023 02:58 PM
- Karma Re: Where can I get the updated sample data for practicing searches using SPL? for PickleRick. 12-31-2022 12:10 AM
- Posted Re: Where can I get the updated sample data for practicing searches using SPL? on Getting Data In. 12-31-2022 12:07 AM
- Tagged Re: Where can I get the updated sample data for practicing searches using SPL? on Getting Data In. 12-31-2022 12:07 AM
- Posted Re: Where can I get the updated sample data for practicing searches using SPL? on Getting Data In. 12-30-2022 01:29 PM
- Posted Re: Where can I get the updated sample data for practicing searches using SPL? on Getting Data In. 12-28-2022 03:54 PM
- Posted Re: Where can I get the updated sample data for practicing searches using SPL? on Getting Data In. 12-26-2022 10:04 PM
- Posted Re: Where can I get the updated sample data for practicing searches using SPL? on Getting Data In. 12-26-2022 07:32 PM
- Posted Re: Where can I get the updated sample data for practicing searches using SPL? on Getting Data In. 12-26-2022 06:48 PM
- Karma Re: Where can I get the updated sample data for practicing searches using SPL? for richgalloway. 12-26-2022 05:30 PM
- Karma Re: Where can I get the updated sample data for practicing searches using SPL? for gcusello. 12-26-2022 05:29 PM
- Posted Where can I get the updated sample data for practicing searches using SPL? on Getting Data In. 12-19-2022 12:14 PM
- Karma Re: Where to download data for use to practice/learn splunk? for skoelpin. 12-17-2022 08:27 PM
- Karma Re: Where to download data for use to practice/learn splunk? for niketn. 12-17-2022 08:27 PM
- Posted Re: Why can't I see the indexes I created in search results? on Getting Data In. 12-06-2022 06:36 AM
- Karma Re: Why can't I see the indexes I created in search results? for PickleRick. 12-06-2022 06:35 AM
- Posted Re: Why can't I see the indexes I created in search results? on Getting Data In. 12-05-2022 07:16 AM
- Karma Re: Why can't I see the indexes I created in search results? for PickleRick. 12-05-2022 07:12 AM
- Posted Re: cant see the indexes i created in search results on Getting Data In. 12-05-2022 07:07 AM
- Karma Re: cant see the indexes i created in search results for gcusello. 12-05-2022 07:05 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
01-01-2023
02:58 PM
am having the same problems. can anyone here help pls. Am not able to do anything for days as i want to practice with the dataset. Attached is the screenshot. Thanks in advance. This is my number i really need urgent assistance. Been searching everywhere on youtube bot no way.
... View more
12-31-2022
12:07 AM
hi @richgalloway , so i was able to install botsv3 but got this error after restarting and splunkd stopped running. pls how can i solve this cos i can see am almost there. thanxx. homePath='/opt/splunk/etc/apps/botsv3_data_set/var/lib/splunk/botsv3/db' of index=botsv3 on unusable filesystem. Validating databases (splunkd validatedb) failed with code '1' attached is the screenshot,
... View more
- Tags:
- botsv3
12-30-2022
01:29 PM
ok lemme try that. Thanks for your time.
... View more
12-28-2022
03:54 PM
i dont understand . i already have a good hand in linux. If i could deploy a fully clustered splunk environment then i dont think i need basic linux training. But its ok if you say so. thanxx.
... View more
12-26-2022
10:04 PM
also i tried to scp the .tgz file from my local folder to the virtual server so i can untar and install it there but was getting "permission denied" error (screenshot attached). can you help pls.
... View more
12-26-2022
07:32 PM
hey bro do i need to download and install all the app/add -on before installing the BOTS v3? Cos i decided not to download the ones that had to do with microsoft and windows since am using Mac.
... View more
12-26-2022
06:48 PM
hi @richgalloway thanxx bro i seen it in v3.
... View more
12-19-2022
12:14 PM
please where can i get the updated sample data for practicing searches using SPL? thanks in advance
... View more
Labels
- Labels:
-
Other
12-06-2022
06:36 AM
ok am gonna try this and revert. Thanks
... View more
12-05-2022
07:16 AM
thanks alot @PickleRick . i fully understand all you wrote. Now for no. 2, what of a situation whereby am not able to see "indexXYZ" at all when trying to search for it even though am aware of the fact that there’s no data in it yet. Why will that be ? Cos i know also created it and i can see it in indexes.conf on the CM. Thanxx bro for ur time. I appreciate .
... View more
12-05-2022
07:07 AM
ok i think i understand it now. I must always use add-on for configuring inputs cos i was wandering where they keep getting the input stanzas that they copy all the time. So for every type of input i must have to look for a TA for it? i appreciate your time . Thanks a lot .
... View more
12-04-2022
11:37 PM
hi @gcusello please can you explain the 6th line on the attached screenshot with some examples. "Install the app or add-on that contains the inputs you want." Thanks a lot.
... View more
12-04-2022
09:42 PM
@PickleRickso what i meant was that i don't see those indexes i created on the cluster master when i try to search for them using any of the SH. Also can you explain to me (am confused at this concept) why when configuring input on the deployment server, how and why they copy input monitor stanza from somewhere. I simply fail to understand that from the videos i've watched on youtube. Will appreciate pls. Thanxx
... View more
11-28-2022
08:53 AM
Ok Guiseppe, i appreciate. Can you send me a link or tell me how to install a dedicated TA. Thanxx
... View more
11-26-2022
06:05 PM
thanks @blbr123 yes i ve not been able to send any data into the indexes but they're not even showing up on the search assistant when am typing "index=...". The only one that shows up is the linux index which bcos ive created that one on the search head gui but then i tried to point to it using the TA_nix that i installed on the DS but still wasnt able to fetch any data.
... View more
11-26-2022
05:59 PM
attached are the indexes i created in _cluster on the CM. but when i try to search them on the SH i do not see them. The only one i see is the linux index because i also created it on the SH GUI.
... View more
- Tags:
- forwarder input
11-26-2022
12:35 PM
hi @gcusello, thanks alot for your reply. so i did everything like you instructed but i also installed the TA on the cluster master. does it affect anything? and if it does, how do i uninstall it? and also how do i know what files to monitor. am new to splunk that's why am trying to get my footing. thank you.
... View more
11-25-2022
11:00 PM
i forgot to add this: [monitor:///var/log] whitelist=(\.log|log$|messages|secure|auth|mesg$|cron$|acpid$|\.out) blacklist=(lastlog|anaconda\.syslog) disabled = 0
... View more
11-25-2022
10:59 PM
hi pls am having problem viewing the indexes i created in my clustered environment. They were all created on the cluster manager ..._cluster and also same on the deployer but when i try to search them i don't get to see any of them. When i tried to check the indexer GUI i see them under indexes but not on the seacrhhead GUI. What am i doing wrong?
Also i installed a TA (add-on for unix and linux) and tried to use one of the monitor stanza as a input on the DS; yet still not working. My serverclasses are fine. Below is the stanza i copied from the TA which i used in my inputs.conf in the local folder of the TA under deployment apps. Kindly assist. Thanxx
... View more
Labels
- Labels:
-
universal forwarder
11-09-2022
10:20 PM
so i created two new indexes on the cluster master and successfully deployed them to the indexing cluster and validated and also show status was successful. But after restarting the server it will not start on the GUI. I checked status and splunkd wasn't running. also on the indexers gui i had a message saying: Failed to register with cluster master reason: failed method=POST path=/services/cluster/master/peers/?output_mode=json manager=172.31.80.210:8089 rv=0 gotConnectionError=1 gotUnexpectedStatusCode=0 actual_response_code=502 expected_response_code=2xx status_line="Error connecting: Connection refused" socket_error="Connection refused" remote_error= [ event=addPeer status=retrying AddPeerRequest: { active_bundle_id=049FC0942259F88577FB49C2989F9432 add_type=Initial-Add base_generation_id=0 batch_serialno=1 batch_size=4 forwarderdata_rcv_port=9997 forwarderdata_use_ssl=0 guid=82EFC827-B30A-48D9-ADFA-A2EEC27DB3CA last_complete_generation_id=0 latest_bundle_id=049FC0942259F88577FB49C2989F9432 mgmt_port=8089 register_forwarder_address= register_replication_address= register_search_address= replication_port=8080 replication_use_ssl=0 replications= server_name=indexer_01 site=default splunk_version=8.2.4 splunkd_build_number=87e2dda940d1 status=Up } Batch 1/4 ].11/10/2022, 6:14:24 AM. I've been at it for over
... View more
Labels
- Labels:
-
indexer
11-08-2022
06:13 PM
am having same problem running splunk WEB on my second and third indexers as i wanted to go and configure their listening ports however, the first indexer is connecting to the web without any problems. I didn't experience this yesterday
... View more
11-07-2022
12:16 AM
so i had this problem and after so much wasting of my time trying to find the problem, it turned out that my management port 8089 was not enabled on the "Security Group" that i was using and the moment i added that port everything worked like magic. And i was able to go to sleep. Lol 😂
... View more
10-19-2022
10:20 PM
so i went and edited the inbound rules on the cluster manager by adding the management port 8089 as a custom tcp port and boom! it worked and the "change was successful". Thanxx guys.
... View more
10-19-2022
10:09 PM
Bad Request — editTracker failed, reason='Unable to connect to license master=https://172.31.17.138:8089 Error connecting: Connect Timeout'
... View more
Labels
- Labels:
-
Mac
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
01-01-2023
07:19 PM
|
