ES Cannot be installed in a cluster on Windows, it only supports standalone ES search heads. https://docs.splunk.com/Documentation/ES/latest/RN/Limitations
... View more
I now use an updated version, that also compensates for choosing "All Time" in the time picker, which makes info_max_time set to "+Infinity" which unfortunately is not a number. | inputlookup mylookup.csv
| addinfo
| where _time>=info_min_time AND (_time<=info_max_time OR info_max_time="+Infinity")
... View more
Hi all, the Splunk Add-on for Tomcat 1.1.0 https://splunkbase.splunk.com/app/2911/ states support for Apache Tomcat 8.x and above.
Does this add-on also work with Apache Tomcat 7.x? Any caveats?
And what about its companion, the Splunk Add-On for Java Management Extensions 3.2.0 https://splunkbase.splunk.com/app/2647/ to collect performance metrics from Apache Tomcat 7.x?
... View more
Executing the "ping" workflow action on, say, the src_ip field neither populates the "host" field nor returns any result. "nslookup", "traceroute", and "whois" workflow actions seem to work fine. Problem is seen with Splunk Enterprise 7.0.3 and 7.1.0.
... View more