Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About arsidiq
arsidiq
Loves-to-Learn Everything
Member since:
09-21-2023
Thursday
Community Statistics
| Posts | 7 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 09-21-2023 |
Activity Feed
- Posted Re: cant search data in indexer on Installation. Thursday
- Posted Re: cant search data in indexer on Installation. Thursday
- Posted Re: cant search data in indexer on Installation. Thursday
- Posted Re: cant search data in indexer on Installation. Thursday
- Posted cant search data in indexer on Installation. Thursday
- Posted Re: Sysmon events not getting indexed on Getting Data In. 09-21-2023 09:30 PM
- Posted sysmon event didnt sent to splunk SH on Getting Data In. 09-21-2023 09:27 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 |
Thursday
i think the problem itself in indexer node, but still cant find out why it can query splunk internal log
... View more
Thursday
first i have 3 different server (HF, SH, and IDX) and the distributed search is going to IDX. there an incident that idx server is shutting down and after i started and run the splunk services, i can't query any data. i try to query index = * and has no result.
... View more
Thursday
already done this, since splunk has to run using user splunk sir so when i want to start the service i already change the permissions
... View more
Thursday
yups the indexer is running, and still cant quey any data after the server has been reboot
... View more
Thursday
i installed splunk in distributed management environment. furthermore, my indexer server got reboot and i can't query my data even though at index = _internal. whereas previously it was fine.
... View more
Labels
- Labels:
-
indexer
-
universal forwarder
09-21-2023
09:27 PM
Hello i already installed UF in Windows Server 2016 but I get the error in Splunkd 09-22-2023 10:19:01.204 +0700 ERROR ExecProcessor [4720 ExecProcessor] - message from ""C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe"" splunk-winevtlog - WinEventLogChannel::init: Failed to bind to DC, dc_bind_time=0 msec
09-22-2023 10:19:01.204 +0700 ERROR ExecProcessor [4720 ExecProcessor] - message from ""C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe"" splunk-winevtlog - WinEventLogChannel::subscribeToEvtChannel: Could not subscribe to Windows Event Log channel 'Microsoft-Windows-Sysmon/Operational'
09-22-2023 10:19:01.204 +0700 ERROR ExecProcessor [4720 ExecProcessor] - message from ""C:\Program Files\SplunkUniversalForwarder\bin\splunk-winevtlog.exe"" splunk-winevtlog - WinEventLogChannel::init: Init failed, unable to subscribe to Windows Event Log channel 'Microsoft-Windows-Sysmon/Operational': errorCode=5 can anyone help me regarding this issue?
... View more
Labels
- Labels:
-
universal forwarder
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
Thursday
|
