Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About chris_thuys
chris_thuys
Path Finder
Member since:
07-31-2014
06-05-2020
Community Statistics
| Posts | 15 |
| Solutions | 1 |
| Karma Given | 4 |
| Karma Received | 4 |
| Member Since | 07-31-2014 |
Activity Feed
- Karma Is there a timeline for the Timewrap app to be supported for Splunk 6.2? for stu2. 06-05-2020 12:47 AM
- Karma Re: Is it possible to use a lookup table defined in one application in another application? for esix_splunk. 06-05-2020 12:47 AM
- Karma Re: Sideview Utils: Can the events module be configured to only show the fields selected and not the _raw events? for sideview. 06-05-2020 12:47 AM
- Got Karma for Is it possible to use a lookup table defined in one application in another application?. 06-05-2020 12:47 AM
- Got Karma for Re: Sideview Utils: Why my view using events module is missing vertical scroll bar, resulting in inability to see whole page?. 06-05-2020 12:47 AM
- Got Karma for Re: Sideview Utils: Why my view using events module is missing vertical scroll bar, resulting in inability to see whole page?. 06-05-2020 12:47 AM
- Got Karma for How do you set/change the default index for SNMP Modular Input?. 06-05-2020 12:47 AM
- Karma Re: Installing Splunk Light Forwarder on Linux for chris. 06-05-2020 12:45 AM
- Posted Re: Is it possible to use a lookup table defined in one application in another application? on Splunk Search. 04-15-2015 01:24 AM
- Posted Re: Is it possible to use a lookup table defined in one application in another application? on Splunk Search. 04-15-2015 01:05 AM
- Posted Is it possible to use a lookup table defined in one application in another application? on Splunk Search. 04-15-2015 01:03 AM
- Tagged Is it possible to use a lookup table defined in one application in another application? on Splunk Search. 04-15-2015 01:03 AM
- Tagged Is it possible to use a lookup table defined in one application in another application? on Splunk Search. 04-15-2015 01:03 AM
- Tagged Is it possible to use a lookup table defined in one application in another application? on Splunk Search. 04-15-2015 01:03 AM
- Tagged Is it possible to use a lookup table defined in one application in another application? on Splunk Search. 04-15-2015 01:03 AM
- Posted Re: How do I display the current date (month and year) in the title of a dashboard? on Dashboards & Visualizations. 01-27-2015 12:44 AM
- Posted How do I display the current date (month and year) in the title of a dashboard? on Dashboards & Visualizations. 01-22-2015 06:08 PM
- Tagged How do I display the current date (month and year) in the title of a dashboard? on Dashboards & Visualizations. 01-22-2015 06:08 PM
- Tagged How do I display the current date (month and year) in the title of a dashboard? on Dashboards & Visualizations. 01-22-2015 06:08 PM
- Tagged How do I display the current date (month and year) in the title of a dashboard? on Dashboards & Visualizations. 01-22-2015 06:08 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 |
04-15-2015
01:24 AM
Thanks. That fixed it for me.
... View more
04-15-2015
01:05 AM
I am looking to use the lookuptable with the inputlookup command
... View more
04-15-2015
01:03 AM
1 Karma
Is it possible to use a lookup table defined in one application in another application?
If it is what might be preventing me from doing this?
... View more
01-27-2015
12:44 AM
Thanks for that. I'll try it out.
... View more
01-22-2015
06:08 PM
How can I display the current month and year ie "January 2015" in the title of a dashboard, ( not the search date)
... View more
01-21-2015
05:40 PM
That worked. The only issue I have now is that the fields are not using the full width of the panel. In my case only about half the width. Can the width of the field columns be adjusted somehow?
... View more
01-13-2015
12:35 AM
I want to only show fields in the events module is this possible ?
... View more
01-13-2015
12:20 AM
2 Karma
I resolved this issue myself by setting the height and setting resizeMode to fixed on each of the event modules.
I imagine the error may be a result of setting resizeMode to auto which then tries to set the bottom of the first event module window to the bottom of the viewport.
Feel free to clarify any of my answer.
... View more
01-12-2015
09:36 PM
I have created a view that displays syslog records from three different searches in three different events modules. As a result, this uses more space than is available on the screen. With a standard dashboard, the web page will have a scrollbar to display the results at the bottom of the page. My view that I created does not have this scrollbar. I modeled my view on the events1_intro demo in sideview_utils which has the scrollbar.
any ideas on what I have missed. code provided below.
<view isSticky="False" isVisible="true" onunloadCancelJobs="true" template="dashboard.html">
<label>Overseer Enhanced</label>
<module name="AccountBar" layoutPanel="appHeader" />
<module name="AppBar" layoutPanel="appHeader" />
<module name="SideviewUtils" layoutPanel="appHeader" />
<module name="Message" layoutPanel="messaging">
<param name="filter">*</param>
<param name="maxSize">2</param>
<param name="clearOnJobDispatch">False</param>
</module>
<module name="HTML" layoutPanel="viewHeader">
<param name="html"><![CDATA[<h1>UNIX Syslog Viewer</h1> ]]>
</param>
</module>
<module name="TimeRangePicker" layoutPanel="splSearchControls-inline" autoRun="True">
<param name="default">Last 24 Hours</param>
<module name="Search" layoutPanel="panel_row1_col1">
<param name="search"><![CDATA[index=rsyslog | ``Syslog_alerts` |sort host, TimeGenerated]]>
</param>
<module name="HTML">
<param name="html"><![CDATA[<h3>Syslog Alerts</h3>]]>
</param>
<param name="maxRows">1</param>
</module>
<module name="SoftWrap">
<module name="RowNumbers">
<module name="Events" layoutPanel="panel_row1_col1">
<param name="resizeMode">fixed</param>
<param name="height">300px</param>
</module>
</module>
</module>
</module>
<module name="Search" layoutPanel="panel_row2_col1">
<param name="search"><![CDATA[index=rsyslog |``Syslog_warnings'| sort by host , -TimeGenerated]]>
</param>
<module name="HTML">
<param name="html"><![CDATA[<h2>SyslogWarnings</h2>]]>
</param>
</module>
<module name="Events" layoutPanel="panel_row2_col1" />
</module>
<module name="Search" layoutPanel="panel_row3_col1">
<param name="search"><![CDATA[index=rsyslog |``Syslog_info`| sort by host, TimeGenerated]]>
</param>
<module name="HTML" layoutPanel="panel_row3_col1">
<param name="html"><h3> Info Events</h3></param>
</module>
<module name="Events" layoutPanel="panel_row3_col1">
<param name="height">300px</param>
<param name="resizeMode">fixed</param>
</module>
</module>
</module>
</view>
... View more
09-12-2014
01:21 AM
The answer would seem to be a result of the difference between getBulk and nextCmd.
To return the values from a subtree next Cmd should be used.
I solved this issue by editing the SNMP Modular Input app and adding another check box to allow get subtree using the nextCmd function.
I had to edit snmp.py, inputs.conf.spec, and default/data/ui/manager/snmp_manager.xml
... View more
09-11-2014
12:40 AM
I am using get bulk to download specific columns of the interfaces table ifTable. I do this in an attempt to reduce the amount of data being stored into splunk.
My snmp input works but retrieves more than it should when using get bulk. I retrieve
1.3.6.1.2.1.2.2.1.13 using get bulk and it retrieves all of that branch (102 entries) plus 23 from the next branch. This would be fine except where I also retrieve the next column 1.3.6.1.2.1.2.2.1.13 which retrieves the branch again (102 reentries) leaving me with 125 entries for that branch. The net result when trying to graph the result of he counter types is bad data as they are counter values and you need to use the delta function to calculate the amount of data sent.
Any idea how to get this module to retrieve only the branch requested ala get subtree ?
copy of inputs.conf below.
[snmp://Brocade switch ifInOctets]
communitystring = knotpublic
destination = perat8fca01
do_bulk_get = 1
index = snmp_unix
ipv6 = 0
object_names = 1.3.6.1.2.1.2.2.1.10,1.3.6.1.2.1.2.2.1.13,1.3.6.1.2.1.2.2.1.14
snmp_mode = attributes
snmp_version = 2C
snmpinterval = 120
sourcetype = snmp-get
split_bulk_output = 1
v3_authProtocol = usmHMACMD5AuthProtocol
v3_privProtocol = usmDESPrivProtocol
... View more
- Tags:
- SNMP Modular Input
09-01-2014
11:28 PM
As this is a test environment and I am not an administrator for this splunk implementation, snmp mod input was installed on the search head. I have discovered that the reason I could not change the index was my lack of appropriate access. The admin has the access and was able to change the index for me.
... View more
08-31-2014
11:21 PM
1 Karma
How do you set/change the default index, I know there is an index drop down in the more settings section. On mine it only has default. How can I add extra indexes to this dropdown.
My splunk setup uses separate indexer and search head.
... View more
08-20-2014
08:38 PM
How do you control how often snmp OID are queried ?
... View more
- Tags:
- SNMP Modular Input
