Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About templier
templier
Communicator
Member since:
03-22-2013
06-05-2020
Community Statistics
| Posts | 85 |
| Solutions | 7 |
| Karma Given | 11 |
| Karma Received | 6 |
| Member Since | 03-22-2013 |
Activity Feed
- Got Karma for What's best practice for monitoring bash_history of all users in the system?. 09-03-2021 04:17 PM
- Karma Re: Question on migrating a small Splunk Enterprise environment to new hardware for woodcock. 06-05-2020 12:49 AM
- Karma Re: How to find similar values in a field? for cmerriman. 06-05-2020 12:49 AM
- Karma Re: Version 1.1.0 doesn't get message trace for snrnbrem. 06-05-2020 12:49 AM
- Karma Re: Index Cluster - Search Factro and Replication Factor NOt Met - Error “Cannot replicate as bucket hasn’t rolled yet.” for rbal_splunk. 06-05-2020 12:48 AM
- Karma Re: Splunk DB Connect: How to configure the checkpoint value? for vsilchev. 06-05-2020 12:48 AM
- Got Karma for How to only index events that contain specific fields?. 06-05-2020 12:48 AM
- Karma Re: Monitoring logons of domain users (EventCode 4624) for sjaworski. 06-05-2020 12:47 AM
- Karma Re: forwarder and indexing volume for Ayn. 06-05-2020 12:47 AM
- Karma Re: help with search request for martin_mueller. 06-05-2020 12:47 AM
- Got Karma for Re: How to troubleshoot why data is not being indexed in Splunk 6.2?. 06-05-2020 12:47 AM
- Got Karma for Feroda logs. 06-05-2020 12:47 AM
- Karma Re: custom Blacklist not working correctly for jlaw. 06-05-2020 12:46 AM
- Karma Re: UniversalForwarder does not filter data for linu1988. 06-05-2020 12:46 AM
- Karma Re: Parameter "blacklist" in inputs.conf for bshuler_splunk. 06-05-2020 12:46 AM
- Got Karma for Re: UniversalForwarder does not filter data. 06-05-2020 12:46 AM
- Got Karma for Parameter "blacklist" in inputs.conf. 06-05-2020 12:46 AM
- Posted Re: Depth limit on All Apps and Add-ons. 01-31-2019 07:17 AM
- Posted Re: Depth limit on All Apps and Add-ons. 01-31-2019 06:55 AM
- Posted Re: Depth limit on All Apps and Add-ons. 01-31-2019 06:47 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 |
01-31-2019
07:17 AM
Use splunk btool check --debug:
Checking: /opt/splunk/etc/apps/splunk_ta_o365/local/inputs.conf
Invalid key in stanza [splunk_ta_o365_management_activity://Ьн365_Azure_AD_Audit] in /opt/splunk/etc/apps/splunk_ta_o365/local/inputs.conf, line 6: ignoreOlderThan (value: 1h).
Did you mean 'index'?
... View more
01-31-2019
06:55 AM
Maybe i not very correctly says, but after i add this block in inputs.conf and restart my HF. I saw how my indexer indexing a new event with timestamp 25-28 day.
... View more
01-31-2019
06:47 AM
Example inputs.conf:
[splunk_ta_o365_management_activity://index_Azure_AD_Audit]
content_type = Audit.AzureActiveDirectory
index = office365
interval = 900
tenant_name = my365
ignoreOlderThan = 1d
In livetime mode i see event from 25-28 jan.
... View more
01-31-2019
05:48 AM
No, i want install a point in log, for example: do not indexing data older than one week.
... View more
01-31-2019
05:29 AM
Hello all!
Install and configure Splunk Add-on for Microsoft Office 365 and i want ask a question - it's possible install a depth of log? Now our server downloading from cloud more that 7 gb. But we need only new data.
... View more
08-08-2018
06:24 AM
I test it - not work.
We have the are many email log from users. And we want see when user send mail to personal email. Very often they are using similar address, few in example in first post, and one more:
v.anasimova - anasimova.v.s
... View more
08-08-2018
02:49 AM
@cmerriman hi.
In testing have a trouble:
Have a two address:
a.krikun - akrikunart
And this couple is not similar. Can we modify regex?
... View more
08-03-2018
07:13 AM
Hello all!
I have a interesting question.
We have a next data:
Two field
a.tudhikova b-antuzh
a.rusevskaya a_rusevskaya
a.rusevskaya alishka92
How we can see a.rusevskaya and a_rusevskaya is similar
Question: can we make a request for matching similarity this field?
I understand that there will be errors in the definition, it's not critical.
... View more
07-24-2018
11:17 PM
Hello,
Have't information from Splunk.
In first release all work fine with a default value, but after update we hade trouble.
... View more
06-13-2018
07:15 AM
Use this:
Interval: 300 seconds
Query windows size: 30 minutes
Delay throttle: 32 minutes
... View more
06-13-2018
02:21 AM
Hello, confirm it.
Re-create inputs with your parameters - all work.But If change back - nothing work.
... View more
10-09-2017
07:24 AM
So, how about install using .tar.gz file downloaded from splunkbase ?
You go Splunk->Manage apps->Install app from file and specify the path to the archive.
And check have you splunk user access to write data to splunk_home directory?
... View more
