About vigneshnarendra

vigneshnarendra · ‎04-02-2023

Hi @manuelcliment @jeyasuriya-m, Right now i am converting CSV to JSON and indexing them. And a saved search makes a lookup out of it. Which is a very inefficient way of uploading a csv. Have you found any solution for this?

vigneshnarendra · ‎02-23-2023

In the email alert action, choose trigger for each result under Trigger conditions. and use the a variable in the email to list.

vigneshnarendra · ‎09-09-2022

What values have you set at props.conf for this source? Do you have a regex based extraction? If you haven't configured any props, I suggest you to write one.

vigneshnarendra · ‎11-18-2021

Hello, You are missing a key parameter. ./splunk diag --upload --case-number=<casenumber> --upload-user=<username>--upload-description="blah blah"

vigneshnarendra · ‎10-12-2020

You can use ignoreOlderThan = 5d at Universal Forwarder to restrict indexing of logs older than 5 days.

vigneshnarendra · ‎09-25-2020

I find these in splunkd.log and the inputs.conf doesn't seem to be working INFO ViewstateReaper - Failed to reap viewstate flashtimeline:fwkfntuv (user: nobody, app:xxx, root: xxxxxxxxx\SplunkUniversalForwarder\etc): Not removable: /nobody/xxxxxx/viewstates/flashtimeline:fwkfntuv INFO ViewstateReaper - Failed to reap viewstate *:fwkg4tq9 (user: nobody, app:XXXXX, root:XXXXXXX\SplunkUniversalForwarder\etc): Not removable: /nobody/XXXXXX/viewstates/*:fwkg4tq9

Posts	6
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎04-12-2017

Online Status	Offline
Date Last Visited	‎04-03-2023 07:05 AM

Failed to reap viewstate

Re: Is it possible to create CSV in splunk addon b...

Re: How to separate daily quarantine email report ...

Re: Data quality issues

Re: Splunk diag upload outbound traffic

Re: props.conf MAX DAYS AGO editing on indexer or ...

Failed to reap viewstate