Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About buckiboy
buckiboy
New Member
Member since:
12-14-2013
06-05-2020
Community Statistics
| Posts | 7 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 12-14-2013 |
Activity Feed
- Posted Re: Log files not being indexed on Splunk Enterprise. 11-15-2019 04:02 AM
- Posted Re: How to create an alert when a new forwarder is added to deployment server? on Getting Data In. 08-01-2019 06:11 AM
- Posted Re: _audit and _internal index data retention on Getting Data In. 08-02-2017 05:02 AM
- Posted How can I use sed in Restrict search terms to sanitize on search on Knowledge Management. 08-03-2016 06:21 AM
- Tagged How can I use sed in Restrict search terms to sanitize on search on Knowledge Management. 08-03-2016 06:21 AM
- Tagged How can I use sed in Restrict search terms to sanitize on search on Knowledge Management. 08-03-2016 06:21 AM
- Tagged How can I use sed in Restrict search terms to sanitize on search on Knowledge Management. 08-03-2016 06:21 AM
- Posted Re: Users unable to save changes in the Edit Incident window on All Apps and Add-ons. 07-27-2016 06:50 AM
- Posted Re: Alert Manager: How to assign a certain incident to an owner based on the results of a search? on All Apps and Add-ons. 07-13-2016 03:03 AM
- Posted Alert Manager: How to assign a certain incident to an owner based on the results of a search? on All Apps and Add-ons. 07-12-2016 01:30 AM
- Tagged Alert Manager: How to assign a certain incident to an owner based on the results of a search? on All Apps and Add-ons. 07-12-2016 01:30 AM
- Tagged Alert Manager: How to assign a certain incident to an owner based on the results of a search? on All Apps and Add-ons. 07-12-2016 01:30 AM
- Tagged Alert Manager: How to assign a certain incident to an owner based on the results of a search? on All Apps and Add-ons. 07-12-2016 01:30 AM
- Tagged Alert Manager: How to assign a certain incident to an owner based on the results of a search? on All Apps and Add-ons. 07-12-2016 01:30 AM
Topics I've Started
11-15-2019
04:02 AM
Hi, have you managed to resolve this? I am having the same problem with logs being shown as indexed, licence used for them but unable to actually see them in Splunk.
... View more
08-01-2019
06:11 AM
| tstats count where index = _* by host | search NOT [| inputlookup forwarders.csv | fields+ host]
| stats values(host) AS new_hosts
There should be a pipe before inputlookup.
... View more
08-02-2017
05:02 AM
Guys, are we sure its called _audit. Looking at our indexers, the directory is called audit.
... View more
08-03-2016
06:21 AM
I have a task to sanitize output of the search for certain users. The data were indexed without sanitation and I cant reindex the data.
example:
index=os | rex field=_raw mode=sed 's/acl/@/'
but i am getting Error in 'litsearch' command: Unable to parse the search: unbalanced parentheses, however the sed command works fine when used in search.
from job inspector:
( index=os ) ( ( | rex field=_raw mode=sed 's/acl/@/' ) ) | fields keepcolorder=t "*" "_bkt" "_cd" "_si" "host" "index" "linecount" "source" "sourcetype" "splunk_server"
... View more
07-27-2016
06:50 AM
Hi Simon
Any idea when this will be fixed?
... View more
07-13-2016
03:03 AM
Thanks
works great.
... View more
07-12-2016
01:30 AM
Hello
I am trying to assign certain incident to an owner based on the results of a search. Is this possible? If not, is it possible to parse the value to a tag value?
Thanks
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:03 AM
|
