Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About max_ruas
max_ruas
Explorer
Member since:
07-12-2017
08-10-2022
Community Statistics
| Posts | 9 |
| Solutions | 1 |
| Karma Given | 0 |
| Karma Received | 2 |
| Member Since | 07-12-2017 |
Activity Feed
- Posted Re: Search for Universal Forwarder getting dropped by the firewall? on Splunk Search. 08-10-2022 08:15 AM
- Posted Search for Universal Forwarder getting dropped by the firewall? on Splunk Search. 08-10-2022 02:10 AM
- Got Karma for Is there a limitation on search strings lengh used on the search bar in splunk UI.. 06-05-2020 12:48 AM
- Got Karma for Re: Is there a limitation on search strings lengh used on the search bar in splunk UI.. 06-05-2020 12:48 AM
- Posted Re: How to use Splunkweb alert to run a script on the forwarder to restart a service? on Alerting. 07-02-2018 11:30 PM
- Posted Re: How to use Splunkweb alert to run a script on the forwarder to restart a service? on Alerting. 07-02-2018 11:18 PM
- Posted Re: How to use Splunkweb alert to run a script on the forwarder to restart a service? on Alerting. 06-29-2018 07:48 AM
- Posted How to use Splunkweb alert to run a script on the forwarder to restart a service? on Alerting. 06-29-2018 06:31 AM
- Tagged How to use Splunkweb alert to run a script on the forwarder to restart a service? on Alerting. 06-29-2018 06:31 AM
- Tagged How to use Splunkweb alert to run a script on the forwarder to restart a service? on Alerting. 06-29-2018 06:31 AM
- Posted splunk restarting by it self on Splunk Enterprise. 11-10-2017 03:21 AM
- Tagged splunk restarting by it self on Splunk Enterprise. 11-10-2017 03:21 AM
- Posted Re: Is there a limitation on search strings lengh used on the search bar in splunk UI. on Splunk Search. 07-12-2017 07:18 AM
- Posted Is there a limitation on search strings lengh used on the search bar in splunk UI. on Splunk Search. 07-12-2017 02:33 AM
- Tagged Is there a limitation on search strings lengh used on the search bar in splunk UI. on Splunk Search. 07-12-2017 02:33 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 1 |
08-10-2022
08:15 AM
Hi @gcusello @thanks for this solution it does work I’ve checked and I do have something similar but what I am trying to get here is a way for us to know when there is a network impact, let’s say a user is onboarding but didn’t request the right firewall rule or when there is a network change and we can use this search to verify the impact to our clients (forwarders) by the way your search where total=0 should be total=1
... View more
08-10-2022
02:10 AM
Hi Splunkers,
I am trying to do a search that gives me a list of forwarders that cannot contact the Deployment server do tô be dropped by the firewall, I have this search below but it gives me too many false positives,
is there a way I can have a search to only trigger if I have results with action!=allowed and 0 events for action=allowed? My search below,
index=firewall dest=deployment_server dest_port=8089 action!=allowed sourcetype=ops
| stats count by srcIP action _date
... View more
07-02-2018
11:30 PM
I've found a solution on the forwarder app it self. on linux is under
cat /opt/splunkforwarder/bin/scripts/readme.txt
Scripts placed in this directory can be called by Alerts for execution
if you define your scheduled search as an alert, you can configure a script to be run whenever the alert is triggered. For security reasons, the scripts need to be placed in a specific folder like the above.
http://docs.splunk.com/Documentation/Splunk/6.2.2/Alert/Setupalertactions#Run_a_script_for_an_alert_action
... View more
07-02-2018
11:18 PM
Thanks for the answer I think is valid although Is not what I am looking for as its much more complex that it needs to be, I am looking for some thing like this.. I haven't got around to test yet but I'm hoping it works.
https://answers.splunk.com/answering/232172/view.html
... View more
06-29-2018
07:48 AM
are you suggesting that in order to run a script on the forwarder I need to do a splunkforwarder restart? can you please clarify your answer?
... View more
06-29-2018
06:31 AM
Hi I have a service that reports to Splunk and some times fell over, is there any chance I can automate this by telling Splunk to run a scripted input on the forwarder level to restart a service, log it and feed the event to Splunk?
Thank you for any answers
Or is there any add on that would do that for Linux like HK Systems Management
... View more
11-10-2017
03:21 AM
Hi,
(PRD) splunk@xxxxxxxx$ /opt/splunk/bin/splunk --version
Splunk 6.3.3 (build f44afce176d0)
I am getting tivali alerts for splunk Search Head restarting but when I look at the logs there is no mentioning of shutdown in splunkd.log for the time date specified.
what can I search for in splunkd.log to know when the system got last back up?
and is there any thing that could cause a unexpected restart? like a big search on the SH?
thanks
... View more
- Tags:
- splunk-enterprise
07-12-2017
07:18 AM
1 Karma
By the way I have found the issue for this, the browser has limitation some how, I tried in Firefox and work fine.
Microsoft Internet Explorer (Browser)
Microsoft states that the maximum length of a URL in Internet Explorer is 2,083 characters, with no more than 2,048 characters in the path portion of the URL. Attempts to use URLs longer than this produced a clear error message in Internet Explorer.
... View more
07-12-2017
02:33 AM
1 Karma
I have a dash-board panel that works for any user but when clicking the loop to open in search, the search query gets truncated making my search invalid. this works fine as admin user. Is there a config file to control this?
... View more
- Tags:
- splunk-enterprise
