When I manually create a rest api stazna in resta_ta/local/inputs.conf and added the cookies = stanza, I see that it is not populated. How is that entry populated and what am I doing wrong?
... View more
doesn't this throw an ERROR? the first part generates an xml and passing it to python errors out. Is this some sort of bug...
$SPLUNK_HOME/bin/splunk cmd splunkd print-modinput-config identity_manager | $SPLUNK_HOME/bin/python
... View more
What is best practice / recommended when deploying universal forwarders relative to the splunk indexers / base install? Can I use a 6.3 forwarder with a 6.2.x base?
... View more
What's the recommended best practice to architect a Windows universal forwarder to an indexer cluster? Is it better to forward all the Windows UF data to a VIP or just have them go straight to the indexers?
... View more