About bpitts2

bpitts2 · ‎11-03-2016

Bah, shame on me for not reading the FAQ. Thanks!

bpitts2 · ‎11-03-2016

I totally understand that. However, there's also a new watermark applied to every page when you're using the Dev/Test license, not to mention that usage telemetry is sent back to Splunk. We don't really surpass our old 10gb dev license very frequently, but I was looking forward to using the 50gb license to bring in a few chatty logs so that we can work on moving forward with implementing them into our production system. Thanks, Bpitts2

bpitts2 · ‎11-03-2016

Hello, I have a distributed dev environment that matches very closely to our production environment. This is a very typical best practice no matter what software you're dealing with. I was shocked to find that the new 50Gb development license does not support being a remote license master for a distributed search environment. I guess I'll have to renew my 10gb dev license and use that instead. I'm really looking for an answer to whether this was intentional, or if a mistake has been made with the way the new licenses are issued. Regards, BPitts2

bpitts2 · ‎10-19-2016

Good to know, thanks!

bpitts2 · ‎10-19-2016

I downvoted this post because this is a completely irrelevant answer.

bpitts2 · ‎10-19-2016

Hello, From my understanding, you would configure a database output in DB Connect v2, then reference that output when you use the search command. dbxoutput output=<string> Creating an Output: http://docs.splunk.com/Documentation/DBX/2.3.1/DeployDBX/Createandmanagedatabaseoutputs Using the DB Connect v2 Search Commands: http://docs.splunk.com/Documentation/DBX/2.3.1/DeployDBX/Commands

bpitts2 · ‎10-19-2016

Hello, As you mentioned most logs can be controlled from /etc/log.cfg, however there are some logs such as splunkd_stderr.log that are effectively "hard coded" and cannot be changed. However, it was suggested that you could use a symbolic link to move the files to your preferred location. Reference: https://answers.splunk.com/answers/9879/possible-to-move-splunks-log-folder-splunk-home-var-log-splunk.html Best Regards, BPitts2

bpitts2 · ‎10-19-2016

Hello, I believe that Splunk Cloud Instances can only install approved applications. Please see the following document for more info: http://docs.splunk.com/Documentation/SplunkCloud/6.5.0/User/GetSplunkCloudapps Best Regards, BPitts2

bpitts2 · ‎10-18-2016

As long as you don't want ANY of the "voipcall_wcas1.cdr." files you could just add "voipcall_wcas1.cdr.*" to the blacklist. Apparently, I cant submit this as an answer because I have less than 40 rep points.

bpitts2 · ‎10-18-2016

Review the splunkd logs from the forwarder hosting the event collector. I found issues with JSON line breaking that was preventing mine from working correctly.

bpitts2 · ‎10-18-2016

Yes, you need to rename the file and then restart the splunk service.

bpitts2 · ‎01-13-2016

Usage Instructions Get started with Splunk Web: In your EC2 Management Console, find your instance running Splunk Enterprise. Copy its public IP. Paste the public IP into a new browser tab (do not hit enter yet). Append :8000 to the end of the IP. Hit enter. Log into Splunk with the following credentials: username: admin password: {the instance id of the instance just created}

bpitts2 · ‎01-13-2016

Looks like you're just missing an 'E' at the end of the URL

bpitts2 · ‎01-13-2016

The link that you posted is 404'ing

bpitts2 · ‎01-13-2016

I know this is old, but I was hoping you may have found an answer. I'm also observing different returned values in splunk than what is in perfmon local to the server.

Posts	24
Solutions	1
Karma Given	14
Karma Received	5
Member Since	‎04-25-2015

Online Status	Offline
Date Last Visited	‎03-14-2021 10:33 PM

Why doesn't the new 50gb Dev License support being...

How could I dynamically exclude events from search...

How to troubleshoot serverclass.conf error "Attrib...

Splunk App for Stream: Why are we seeing constant ...

How to deploy and configure the Splunk App for Str...

Query SQL DB and ingest results to index?

Re: Why doesn't the new 50gb Dev License support b...

Re: Why doesn't the new 50gb Dev License support b...

Why doesn't the new 50gb Dev License support being...

Re: How to control splunk logs splunkd_stderr.log ...

Re: How to control splunk logs splunkd_stderr.log ...

Re: How to update a database table from splunk DB ...

Re: How to control splunk logs splunkd_stderr.log ...

Re: Search Activity app set up in Splunk Cloud

Re: How Do I Blacklist a specific file.

Re: HTTP Event Collector not working after update

Re: How to Reset the Admin password?

Re: After launching an AWS instance for Splunk Ent...

Re: After launching an AWS instance for Splunk Ent...

Re: After launching an AWS instance for Splunk Ent...

Re: Why is the Windows perfmon data in Splunk for ...