Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About jhuebner
jhuebner
Explorer
Member since:
06-18-2010
06-05-2020
Community Statistics
| Posts | 6 |
| Solutions | 2 |
| Karma Given | 0 |
| Karma Received | 0 |
| Member Since | 06-18-2010 |
Activity Feed
- Posted Re: Your Splunk license expired or you have exceeded your license limit too many times on Security. 01-12-2011 06:41 PM
- Posted Re: Splunk & Ossec intergration on Monitoring Splunk. 10-20-2010 05:51 PM
- Posted Re: OSSEC and SPLUNK... just stopped ? on Monitoring Splunk. 10-20-2010 05:48 PM
- Posted Your Splunk license expired or you have exceeded your license limit too many times on Security. 10-20-2010 05:45 PM
- Tagged Your Splunk license expired or you have exceeded your license limit too many times on Security. 10-20-2010 05:45 PM
- Posted Splunk for OSSEC app on All Apps and Add-ons. 06-18-2010 04:00 PM
- Tagged Splunk for OSSEC app on All Apps and Add-ons. 06-18-2010 04:00 PM
- Tagged Splunk for OSSEC app on All Apps and Add-ons. 06-18-2010 04:00 PM
- Posted OSSEC and SPLUNK... just stopped ? on Monitoring Splunk. 06-18-2010 02:32 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
01-12-2011
06:41 PM
Else, I've found doing an "update" install clears the cache too 🙂
JLH
... View more
10-20-2010
05:51 PM
The reporting and searching is much easier using SPLUNK to look at & do searches on the OSSEC data. The newest version of SPLUNK and the OSSEC plugin give you a whole new set of features.
I've not updated to the 2.5.1 version, I'm still on 2.4, but I think I'll give it a try, x.x.1 just came out.
... View more
10-20-2010
05:48 PM
I got this going by running a re-install. apparently something got mad, but the reinstall fixed it.
JLH
... View more
10-20-2010
05:45 PM
So I've read this link, but I still have questions.
http://answers.splunk.com/questions/322/what-happens-when-i-exceed-my-licensed-limit
I'm not trying to index a LARGE amount of data, I'm only using SPLUNK as a front end for OSSEC.
I have ~25 windows servers pointing at my OSSEC instance, and then it pointing @ SPLUNK.
If I scale back on the amount of data being indexed (change it dramatically) how long will it take to re-enable my license?
... View more
- Tags:
- license-violation
06-18-2010
04:00 PM
Hi,
I used the app library interface to install the OSSEC app. It always gives me this error:
500 Internal Server Error
TypeError: 'NoneType' object is unsubscriptable
This page was linked to from http://lcua141:8000/en-US/app/launcher/home.
You are using lcua141:8000, which is connected to splunkd @79191 at https://127.0.0.1:8089 on Fri Jun 18 10:58:17 2010.
any ideas or suggestions appreciated.
... View more
06-18-2010
02:32 PM
I've had both services running on the save Ubuntu 10.04 server for about a week. OSSEC is cooking along gathering information. And SPLUNK is happily displaying this data for easy quick high level viewing.
I did switch SPLUNK to the "free" license.
For days & days I've had good data. @ around noon yesterday, it started to taper DOWN...
06-18-2010 05:59:55.073 INFO Metrics - group=per_source_thruput, series="udp:10002", kbps=2.371535, eps=3.741935, kb=73.517578
host=lcua141 Options| sourcetype=splunkd Options| source=/opt/splunk/var/log/splunk/metrics.log Options
I noticed today @ 6am data stopped. This was the last entry...
6/18/10
6:00:26.048 AM
06-18-2010 06:00:26.048 INFO Metrics - group=per_source_thruput, series="udp:10002", kbps=2.371220, eps=4.258065, kb=73.507812
host=lcua141 Options| sourcetype=splunkd Options| source=/opt/splunk/var/log/splunk/metrics.log Options
I'll start by looking at this splunk log...
Any suggestions/ideas appreciated!
Thank you!
JLH
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:02 AM
|
