About nowakdaw

nowakdaw · ‎10-25-2012

Hello, Not sure this is what you are looking for, but what you can do is this with javascript: a href="javascript:window.open(' ')">NAME Once NAME is clicked, it will open up a new window with your URL.

nowakdaw · ‎10-25-2012

Thank you all for your help. I accomplished this by pointing to the specific folder explicitly and then using whitelists to get the necessary logs out.@lguinn, thank you. @jkat54 Thank you, I also try this and see if it works.

nowakdaw · ‎10-25-2012

@bmacias84, Thank you I appreciate all your help.

nowakdaw · ‎10-22-2012

Hello All, I searched on answers but I can't seem to come up with a clear answer. Has anyone figured out a workaround for the "Warning: In Windows, you cannot currently use a wildcard at the root level. For example, this does not work: [monitor://E:\...\foo\*.log] " from http://docs.splunk.com/Documentation/Splunk/latest/data/Specifyinputpathswithwildcards I am attempting to forward log files using wildcards in my monitor names. I am using Splunk version 4.3.2. Thank you for your help.

nowakdaw · ‎10-19-2012

Hello bmacias, Thank you for your response. I assume Bubbles and Ace refer to the code names for the releases. Could you point me of where you found this information? I seem to be unable to find it on the webpage. Thank you again for your time.

nowakdaw · ‎10-19-2012

Hello All, I am wondering if anyone knows if Splunk, or a splunk app can accomplish customizing your table. For example a search like this: * | table host, source, sourcetype I would like to be able to interactively move the columns via mouse drag(I know you can specify the order with the table command by what field is typed in first, but interactively as an alternative) In addition, I would like to be able to collapse my columns/rows and bring them back up interactively. Does anyone know if this is a possibility either via "out-of-the-box" Splunk or via an app? Thank you!

nowakdaw · ‎10-18-2012

Hello All, I have figured this out. For all those interested: I used SEDCMD to accomplish this, giving a regex to match the time from the log4j entry and removing this. I verfied that the timing is correcting with the entry removed. It seems that this SED removal is done after splunk indexes the data. This page was very usefulfto me. http://docs.splunk.com/Documentation/Splunk/5.0/Data/Anonymizedatausingconfigurationfiles Thank you all!

nowakdaw · ‎10-18-2012

Hello Everyone! Thank you for your help. Our indexer currently has standard log4j logs as well as some custom logs. The issue occurs when we search for a log4j log (most of them are in this format) we have redundant time values. For example my search result will bring: »17/10/2012 22:12:45.904[This is the left hand side time with the dropdown arrow] and then the event shows 22:12:45.904 2012-10-17 22:12:45,904. Is there anyway to remove this redundancy? Please let me know if this is unclear. Thank you for your help.

nowakdaw · ‎09-18-2012

Yes! I apologize for my carelessness. Thank you for pointing that out.

nowakdaw · ‎09-18-2012

Thank you! Your time is appreciated!

nowakdaw · ‎09-18-2012

Hello All, Does anyone know how piping in splunk is performed. I tried to search for information on this subject but unfortunately I am unable to find anything on it. My question is: does it take the search results from the buffer and then searches on it when piping is done. To clarify if I search for host="some_host" | source="testing_source" does splunk first search for some host and then from that buffer searches for the source testing_source on it. OR does it search for some_host and then when you pipe it searches again from the entire buffer? The main purpose of this question is performance. Thank you for all your help!

nowakdaw · ‎09-18-2012

Thank you very much!, would you happen to know where I can find "Field Actions" I tried to look for it via my own splunk instance as well as through splunk.com and I could not find anything on it. Thanks again.

nowakdaw · ‎09-17-2012

Hello All, Thank you for your help!. I was wondering if anyone knew if splunk has the ability to parse through log4j files and then provide links to the line of code where that error/warning is fired. Provided we supply it a code base. Thanks

nowakdaw · ‎09-10-2012

Thank you very much for your help. I appreciate it. Yes I am on 4.3. Was an easy fix. Thank you. Just to note: I assume this is outdated http://splunk-base.splunk.com/answers/2200/nested-active-directory-groups

nowakdaw · ‎09-06-2012

Hello All, Thank you for your time. If you have a group in AD that has subgroups and you map a role to the group, do the subgroups get updated with the same permissions? I attempted to test this and it seems that the answer is no. I am part of a child group. If I update the parent group I can not log into splunk. But if I update the child I can log in. It seems that if you update the parent group the child groups do not get updated. Can anyone confirm this? Seems like this may be a bug?

Posts	15
Solutions	2
Karma Given	1
Karma Received	7
Member Since	‎09-06-2012

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

windows wildcard path name bug

Table Command: Customization?

Redundant Time Values in Search

piping in splunk

Linkage to code?

LDAP Groups and Subgroups

Re: how to open a popup form search when user clic...

Re: windows wildcard path name bug

Re: Table Command: Customization?

windows wildcard path name bug

Re: Table Command: Customization?

Table Command: Customization?

Re: Redundant Time Values in Search

Redundant Time Values in Search

Re: piping in splunk

Re: Linkage to code?

piping in splunk

Re: Linkage to code?

Linkage to code?

Re: LDAP Groups and Subgroups

LDAP Groups and Subgroups