Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- About wpb162
wpb162
Explorer
Member since:
04-06-2023
09-05-2024
Community Statistics
| Posts | 10 |
| Solutions | 1 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 04-06-2023 |
Activity Feed
- Posted Re: Users still showing after being deleted on Splunk Search. 09-05-2024 12:26 PM
- Posted Connect HEC token to Monitoring Console on Monitoring Splunk. 07-03-2024 07:48 AM
- Posted Re: Users still showing after being deleted on Splunk Search. 06-04-2024 11:58 AM
- Posted Re: Users still showing after being deleted on Splunk Search. 06-04-2024 06:17 AM
- Posted Re: Users still showing after being deleted on Splunk Search. 06-04-2024 06:16 AM
- Posted Users still showing after being deleted on Splunk Search. 06-03-2024 09:47 AM
- Posted Disable ANSI escape codes on Security. 07-26-2023 08:22 AM
- Karma Re: Hosting on AWS EC2 with EBS encryption? for isoutamo. 06-27-2023 03:50 AM
- Posted Hosting on AWS EC2 with EBS encryption? on All Apps and Add-ons. 06-26-2023 07:07 AM
- Posted Re: Convert stats to JSON on Splunk Search. 04-06-2023 01:49 PM
- Posted Convert stats to JSON on Splunk Search. 04-06-2023 12:27 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
09-05-2024
12:26 PM
I believe I simply needed to restart each instance after I deleted the users on it.
... View more
07-03-2024
07:48 AM
We get data in using HEC tokens, and the data is flowing just fine. But when we try to view the HTTP Event Collector panel under Indexing > Inputs, it says we have no tokens configured. How do we configure the MC to see the existing tokens?
... View more
Labels
- Labels:
-
HTTP Event Collector
06-04-2024
11:58 AM
Permissions seem to be fine, and the deleted users do not show up in the passwd file. However, the users still show up in the GUI and when I run list user
... View more
06-04-2024
06:17 AM
3 members in the cluster, has not updated since I made the change yesterday, even on the instance I made the change on.
... View more
06-04-2024
06:16 AM
Just using the local Splunk authentication (username and password), nothing external.
... View more
06-03-2024
09:47 AM
I am trying to delete users that just use Splunk authentication. I have the admin role. I have tried both the web GUI and the CLI to delete users, but they are still visible after deletion. But something seems to have happened, because, even though the users are still showing up using the list command in the CLI, when I try to delete the user using the remove command, it says the user does not exist. Is there a config file I need to edit to get the users to stop appearing? This is also a clustered Splunk Enterprise environment, does this mean there are further steps I have to take to delete a user? Thanks
... View more
07-26-2023
08:22 AM
I am unaware of how to filter or disable the processing of ANSI escape codes as recommended by Splunk, due to the recently announced log injection vulnerability. We have a clustered environment running 9.0.5 on AWS EC2 instances running Linux. How can I implement these recommendations?
... View more
Labels
- Labels:
-
Linux
06-26-2023
07:07 AM
We are hosting our Splunk instances on AWS EC2 instances, and will begin using EBS encryption. I haven't found any clear answer to whether or not we have to make config changes to Splunk. Can anyone provide clarifications?
... View more
Labels
- Labels:
-
configuration
04-06-2023
01:49 PM
I appreciate your answer, and I hope to be able to use it very soon. However, we currently are running Splunk version 8.0.10, so I don't believe the tojson command is available to us. If there is another (probably more complicated) way to do that with our current version, that would be fantastic. Otherwise, I expect we will have to wait until we upgrade.
... View more
04-06-2023
12:27 PM
I have a user who wants to send a table resulting from | stats values() to a summary index via the collect command, but all of the logs in this summary index need to be in json format. By default, collect just separates the field-value pairs by commas. How would we format these in json before or after the collect command sends them to the summary index?
... View more
