Hi @ecd, which version of splunk you are using ? i am assuming this stanza was created in any props.conf on splunk that is hosting HEC tokens ?
... View more
changing max_mem_usage_mb to higher value in limits.conf in SHC doesn't seem to work. surprisingly other limits.conf settings are working as expected. just not max_mem_usage_mb for [mvexpand]. any clue?
... View more
i am trying to figure out how we can detect issues with Data Onboarding. Is there any Splunk App available to identify issues with data onboarding ? what different alerts we can create in Splunk Deployment Server ?
Thanks.
... View more
To Monitor Splunk, we are leveraging Splunk Management Console, Deployment Server and integrating these Alerts with ServiceNow for auto-ticketing. i want to know details on different error conditions we can setup alerts so we detect some issues beforehand.
Also, is there any automation approach tried like if one Splunk server is running low on space, scripts can be triggered to clean up space on that server?
... View more