About tjbaker72

tjbaker72 · ‎05-03-2016

I had to make the recommended change for the stats command as well. The author, Nimesh Doshi, appears to be a Splunk employee. How can we get a new revision of the command created with the update? I couldn't find the source on githib...

tjbaker72 · ‎05-02-2016

With the PagerDuty App for Splunk 1.0 installed on Splunk 6.4 I see this on Splunk start: Checking conf files for problems... Invalid key in stanza [pagerduty] in /opt/splunk/etc/apps/pagerduty_incidents/local/alert_actions.conf, line 3: param.integration_url (value: ). Invalid key in stanza [pagerduty] in /opt/splunk/etc/apps/pagerduty_incidents/default/alert_actions.conf, line 9: param.incidents_url (value: ). Your indexes and inputs configurations are not internally consistent. For more information, run 'splunk btool check --debug' Done When running btool it prints: Checking: /opt/splunk/etc/apps/pagerduty_incidents/local/alert_actions.conf Invalid key in stanza [pagerduty] in /opt/splunk/etc/apps/pagerduty_incidents/local/alert_actions.conf, line 3: param.integration_url (value: ). Did you mean 'param.incident_url'? Did you mean 'payload_format'? Ideas?

tjbaker72 · ‎03-04-2016

It has been over a year since jcoates response. Has there been any progress on using instance profiles instead of api keys? Thanks, Trevor

tjbaker72 · ‎02-26-2016

We download the rds logs via the cli and upload them to an s3 bucket on a schedule. From there we can use the s3 input. I presume aws will add the option to put rds logs in an s3 bucket, just as they do with elb logs. Cheers, Trevor

Posts	4
Solutions	0
Karma Given	0
Karma Received	3
Member Since	‎01-22-2014

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

PagerDuty App for Splunk 1.0: Why am I getting "In...

Re: Levenshtein Search Command incomplete results ...

PagerDuty App for Splunk 1.0: Why am I getting "In...

Re: Can we use AWS instance profiles instead of ha...

Re: Is the option to download AWS RDS log files be...