About hhhwang

hhhwang · ‎09-14-2022

Intermittent text file data collection is not possible. Initially, it is a collection of csv file data. After that, if you change only a few characters in the csv, you cannot collect them intermittently. Which part should I check? - setting [monitor://D:\Space\Config*File\Devicenet_Config.csv] disabled = 0 host = HOST_NAME index = FDC_MainUtility sourcetype = FDCField crcSalt = <SOURCE>

hhhwang · ‎09-12-2022

Hi, @scelikok, disabled = 0 is enabled, disabled = 1 is disabled, isn't it? And the host name is different from the name of UF. Splunk is installed and used on a per-device basis, and this issue occurs occasionally. In other cases, the data is collected well.

hhhwang · ‎09-12-2022

Data cannot be registered by Universal Forwarder. There are a total of 12 Universal Forwarders. Only one of these universal forwarders registers data. Even if I change crcSalt, the data cannot be registered. Which part should I check? <setting> [monitor://D:\Splunk\iocheck\PMC*\PMC*.csv] disabled = 0 index = pmc host_segment = 3 sourcetype = pmc_iotable crcSalt = <SOURCE>

hhhwang · ‎09-06-2022

1. The data storage schedule runs every 30 minutes. 2. The data lookup time is one hour. 3. Data overlaps for 30 minutes. I wonder what happens to the 30 minute data overlapped here.

hhhwang · ‎09-05-2022

If I save the data, will it be updated if the same data is included? Or is there no change?

hhhwang · ‎09-05-2022

Thank you for your answer.

hhhwang · ‎09-04-2022

There are reports that run every 0 and 30 minutes. And there's a lot of reports that start every 5 minutes, 35 minutes. If the report that ran at 5 minutes is delayed and ends at 35 minutes, will the report that ran at 30 minutes have an effect?

hhhwang · ‎08-21-2022

Thanks, gcusello. Splunk UF version is 6.4.10. I'll try to solve it in the way you told me. But it's been about a month since I installed it, so can I know why the certificate has expired?

hhhwang · ‎08-21-2022

The universal forwarder was used well, but one day it suddenly stopped and no longer runs. Why is this happening? The execution environment is as follows: Windows7 32bit

Posts	10
Solutions	0
Karma Given	8
Karma Received	0
Member Since	‎08-21-2022

Online Status	Offline
Date Last Visited	‎09-26-2022 03:44 AM

Data collection not working- What should I check f...

Data is not being registered by Universal Forwarde...

If I save the data, will it be updated if the same...

Will a delayed report affect the next report?

Why can't Universal Forwarders run?

Data collection not working- What should I check f...

Re: Universal Forwarder

Data is not being registered by Universal Forwarde...

Re: Save the same data

If I save the data, will it be updated if the same...

Re: Will it affect the report?

Will a delayed report affect the next report?

Re: Why can't Universal Forwarders run?

Why can't Universal Forwarders run?