Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About coreyf311
coreyf311
Path Finder
Member since:
08-03-2017
06-05-2020
Community Statistics
| Posts | 51 |
| Solutions | 2 |
| Karma Given | 3 |
| Karma Received | 3 |
| Member Since | 08-03-2017 |
Activity Feed
- Got Karma for Bundle replication response code 500. 06-05-2020 12:50 AM
- Karma Re: remove result from dashboard for woodcock. 06-05-2020 12:49 AM
- Karma Re: workflow action to polpulate macro for woodcock. 06-05-2020 12:49 AM
- Karma Re: Metrics props and transforms for xpac. 06-05-2020 12:49 AM
- Got Karma for Search Head Cluster member removal. 06-05-2020 12:49 AM
- Got Karma for Re: Metrics props and transforms. 06-05-2020 12:49 AM
- Posted Dark-Mode not working after upgrade on Installation. 03-05-2020 05:02 AM
- Posted Single Value Radial Gauge on All Apps and Add-ons. 02-12-2020 11:02 AM
- Posted running smartctl as non root on All Apps and Add-ons. 08-02-2019 05:39 AM
- Posted splunk connect for Kubernetes on All Apps and Add-ons. 04-16-2019 09:24 AM
- Posted Re: internal documentation links on Knowledge Management. 01-29-2019 08:22 AM
- Posted internal documentation links on Knowledge Management. 01-28-2019 06:29 AM
- Posted Re: Netflow timestamps are wrong after 7.2.3 upgrade on Getting Data In. 01-15-2019 08:24 AM
- Posted Netflow timestamps are wrong after 7.2.3 upgrade on Getting Data In. 01-15-2019 04:31 AM
- Tagged Netflow timestamps are wrong after 7.2.3 upgrade on Getting Data In. 01-15-2019 04:31 AM
- Tagged Netflow timestamps are wrong after 7.2.3 upgrade on Getting Data In. 01-15-2019 04:31 AM
- Posted Re: Where can I set the read-ahead per the following warning in our mongod.log? on Dashboards & Visualizations. 12-06-2018 07:25 AM
- Posted Where can I set the read-ahead per the following warning in our mongod.log? on Dashboards & Visualizations. 12-06-2018 06:53 AM
- Posted Re: kvstore value of 256 out of range on Installation. 12-04-2018 04:20 AM
- Posted Re: Bundle replication response code 500 on Deployment Architecture. 12-04-2018 03:30 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 |
03-05-2020
05:02 AM
We upgraded from 7.02 to 7.3.4 and Dark-Mode is not working in our SHC. Anyone experience this or know the underlying files associated with "Dark-Mode"?
... View more
- Tags:
- dark-mode
02-12-2020
11:02 AM
can you add thresholding to the Single Value Radial Gauge in the beta Dashboard App v0.3.2 on Splunk Enterprise 7.3.4?
... View more
08-02-2019
05:39 AM
we run splunk as a non root user. I cant see all the disks available when i run smartctl as "splunkuser" so the scripted inputs are not working correctly.
... View more
04-16-2019
09:24 AM
receiving this error when trying to get the Metrics portion working. Events based logging is being ingested to the HEC correctly.
[error]: #0 Failed to scrape metrics, error=#
... View more
- Tags:
- splunk-enterprise
01-28-2019
06:29 AM
I have updated the docsCheckerBaseURL property in web.conf (in system/local) however clicking on any of the links under "Help" are still trying to contact external links. I have tested the internal link and it does work. Is there something I am missing to force our search head to look at this link versus the external help sites?
Splunk 7.2.3
... View more
- Tags:
- splunk-enterprise
01-15-2019
08:24 AM
not sure where the issue is but changing the DATETIME_CONFIG to CURRENT from the default of auto fixed it, of course. Not sure why we have the issue in the first place though. Still researching.
... View more
01-15-2019
04:31 AM
After upgrading splunk to 7.2.3, our netflow logs have a timestamp from 2015. We are using the newest versions of Netflow 3.8.8 and Netflow Optimizer 2.5.0.0.858.
... View more
12-06-2018
07:25 AM
unfortunately no. We have not upgraded nor do I have those warning messages.
... View more
12-06-2018
06:53 AM
Were can I set the read-ahead per this warning in our mongod.log? recommends changing it to 256 or lower.
** WARNING: Readahead for /opt/splunk/var/lib/splunk/kvstore/mongo is set to 4096KB
... View more
12-04-2018
03:30 AM
I don't know what the exact issue was except when we migrated that indexer from one ESXi host to another the problem was resolved. The problem was on the ESX host but not sure the exact issue as I am not on the team that supports vmware.
... View more
12-04-2018
03:27 AM
6 node SHC. SHC complains with this error from time to time.
KV Store has changed status to failed. _id field value of 256 is out of range.
... View more
- Tags:
- splunk-enterprise
11-19-2018
09:56 AM
exactly how I ended up doing it! thanks for the reply. Figured out the above syntax shortly after posting the question. Not sure why i dont have the option to choose your reply as the accepted answer??
... View more
11-19-2018
06:26 AM
In the first panel of a dashboard, a user can click on a host to get more panels to display. One such panel depends on if row.host contains a string. The panel I want depends on $disk$.
<condition>
<set token="host">$row.host$</set>
</condition>
<condition match="'row.host == "exch-mail*"">
<set token="disk">true</set>
</condition>
but the panel depending on $disk$ is not working. All the other panels are fine but they are using $host$.
... View more
11-01-2018
08:49 AM
turns out an old, thought to be decomm'd server that WAS our old deployer was turned on again and pushing bundles to the SHC via a script we have running. DOH
... View more
11-01-2018
07:00 AM
1 Karma
We have a Splunk Ent. 7.0.2 Search head cluster. We are seeing errors like below.
Search peer splunksh-01 has the following message: bundle replication: problem replicating config (bundle) to search peer 'splunkidx-01', HTTP response code 500 (HTTP/1.1 500 read timeout). read timeout (unknown write error).
We are an entirely virtual set up using VMware.
... View more
- Tags:
- splunk-enterprise
11-01-2018
05:43 AM
can you expand on the vmware issue? we are also seeing this issue and are in a VMware environment.
... View more
10-22-2018
07:58 AM
Thank you for all the suggestions. Here is what I came up with. I ended up needing multiple strings in the whitelist. I realize there are probably other ways but this one works for me.
whitelist = (.*string.*|.*otherstring.*|.*something.*)
... View more
10-18-2018
10:40 AM
I need to whitelist files that contain a string in any case and in any place in the filename. And, they can either be .txt or .csv. For example.....any file that contains the string "termite"
termite.txt or termite.csv or TERMite.txt or october_termite_file01.csv
I got "/termite/gmi" from regex 101 but does not seem to work in inputs.conf whitelist.
... View more
