Hi all, I want to onboard my windows Security logs in to splunk with out installing UF is there any other way with out installing UF. Thanks ... View more

Hi all, Unable to start the splunk web interface in my windows local machine, below is the error it is showing when i tried to start the splunk using cli. C:\Program Files\Splunk\bin>splunk start Splunk> Take the sh out of IT. Checking prerequisites... Checking http port [50000]: open Checking mgmt port [50001]: open Checking appserver port [127.0.0.1:8065]: open Checking kvstore port [8191]: open Checking configuration... Done. New certs have been generated in 'C:\Program Files\Splunk\etc\auth'. Checking critical directories... Done Checking indexes... (skipping validation of index paths because not running as LocalSystem) Validated: _audit _configtracker _dsappevent _dsclient _dsphonehome _internal _introspection _metrics _metrics_rollup _telemetry _thefishbucket anomaly_detection botsv3 datamontgomery history itsi_grouped_alerts itsi_im_meta itsi_im_metrics itsi_import_objects itsi_nats_metrics itsi_notable_archive itsi_notable_audit itsi_summary itsi_summary_metrics itsi_tracked_alerts main snmptrapd student_scores summary win_10 Done Checking filesystem compatibility... Done Checking conf files for problems... Done Checking default conf files for edits... Validating installed files against hashes from 'C:\Program Files\Splunk\splunk-10.0.0-e8eb0c4654f8-windows-x64-manifest' Could not open 'C:\Program Files\Splunk\etc/apps/splunk_httpinput/default/inputs.conf': The system cannot find the path specified. Problems were found, please review your files and move customizations to local All preliminary checks passed. Starting splunk server daemon (splunkd)... Splunkd: Starting (pid 5636) Done Waiting for web server at http://127.0.0.1:50000 to be available..... WARNING: web interface does not seem to be available! ... View more

Hi,   Sample Data (CSV format) –  student_id,student_name,class,school,subject,score 1,Alice,10A,School1,Math,85 2,Bob,10A,School1,Math,72 3,Charlie,10B,School1,Science,90 4,David,10A,School2,Math,65 5,Eva,10B,School2,Science,88 How to achieve this Query : You need to get 2 ranks for students 1. At class level 2. At school level. Kindly build this in single query. ... View more

Hi all, How to apply props.conf and transforms.conf Sample Log Data 2024-09-01 12:10:22 student=Alice subject=Math score=85 2024-09-01 12:11:45 student=Bob subject=Science score=72 Objective  Extract fields properly.  Apply a transform to mask student names.   thanks ... View more

Hi, Please guide me how  to enable clustering (splunk enable cluster-master, splunk edit cluster-config) for one instance as Cluster Master, 3 instances as Indexers, 3 instances as Search Heads. Thanks ... View more

Hi, I want to install the BOTS v3 dataset on Splunk 10.0 in Windows OS. Is it compatible with this version? If yes, how can we install the prerequisite apps in one go? Also, since some apps are not available on Splunkbase, will the dataset run without those apps? Thanks ... View more

Hi, I would like to know the cpu usage metrics of servers in my environment, How to check it . Thanks ... View more

My task is like I need to group by two fields i.e  eventid and dest  make it happened at  firsttime and lasttime    eventid      dest                                    count                firsttime                                     lasttime  256             drdydyf.google.com    56                  2022-09-28T19:21:10             2022-09-28T19:21:34   249               bigdaddy.com         78                         2022-09-28T19:22:10              2022-09-28T19:22:20 ... View more