Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About e82than
e82than
Communicator
Member since:
07-23-2010
06-05-2020
Community Statistics
| Posts | 45 |
| Solutions | 1 |
| Karma Given | 8 |
| Karma Received | 8 |
| Member Since | 07-23-2010 |
Activity Feed
- Karma Re: Changing the options available on manager for Drainy. 06-05-2020 12:46 AM
- Karma Re: Do I Need an Event Type For This? for lguinn2. 06-05-2020 12:46 AM
- Karma Re: Main differences between a saved report and a saved search for lguinn2. 06-05-2020 12:46 AM
- Karma Re: Simple eval + stats count by 2 fields not working for the_wolverine. 06-05-2020 12:46 AM
- Got Karma for Main differences between a saved report and a saved search. 06-05-2020 12:46 AM
- Got Karma for default.xml customization. 06-05-2020 12:46 AM
- Got Karma for Re: default.xml customization. 06-05-2020 12:46 AM
- Got Karma for Re: default.xml customization. 06-05-2020 12:46 AM
- Got Karma for Re: default.xml customization. 06-05-2020 12:46 AM
- Karma Is there a Solaris SMF manifest for Splunk? for pde. 06-05-2020 12:45 AM
- Karma Re: Is there a Solaris SMF manifest for Splunk? for djalton. 06-05-2020 12:45 AM
- Karma Re: Is there a Solaris SMF manifest for Splunk? for mikelanghorst. 06-05-2020 12:45 AM
- Karma Re: Manager view for power user does not list any options even if i have given the power user the necessary capabilities. for Genti. 06-05-2020 12:45 AM
- Got Karma for Re: splunk forwarder showing different events indexed than splunk indexer. 06-05-2020 12:45 AM
- Got Karma for Re: Is there a Solaris SMF manifest for Splunk?. 06-05-2020 12:45 AM
- Got Karma for Splunk insists that i schedule a saved search. 06-05-2020 12:45 AM
- Posted Re: syslog data sent across forwarders and multiple indexers on Getting Data In. 02-26-2013 06:33 PM
- Posted Re: syslog data sent across forwarders and multiple indexers on Getting Data In. 02-23-2013 02:16 AM
- Posted syslog data sent across forwarders and multiple indexers on Getting Data In. 02-21-2013 08:39 AM
- Tagged syslog data sent across forwarders and multiple indexers on Getting Data In. 02-21-2013 08:39 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 1 |
02-26-2013
06:33 PM
the 2nd (similar) setup is working when sending to splunk. but the 1st example is not transmitting. Multiple syslog data as in e.g network appliances which transmits only on UDP://514 or UDP only traffic streams.
... View more
02-23-2013
02:16 AM
Help please, if anyone know?
... View more
02-21-2013
08:39 AM
I tried to do this
Send syslog data from a network device (on port: 514) to a Universal Forwarder listening on port: 514 irrespective of (ANY) host's IP -> indexer listening on port 20980 -> to another Universal Forwarder listening 20981 -> to a Syslog-NG server listening for all audit data from splunk and syslog data.
the mode of travel goes like this
__Multiple syslog data_ > UF > Indexer > UF > Syslog-NG_
the data traverses over this many system as they are in different network zones with the final Syslog-NG server there being a Vendors' component. I have ensure that the Last Syslog server is receiving all my splunkd and other splunk's logs from all the components, but i cannot get the Multiple syslog data (on port:514) to send over to the final Syslog-NG server.
What do i have to do to troubleshoot it?
I've created a similar setup which vary slightly from the top to narrow down the problem.
Multiple syslog data (on port:514) -> Syslog Indexer -> UF -> Syslog-NG_
Do note that the last Syslog-NG server is the same as the one as the top. This setup apparently is sending out all the splunkd and other splunk logs out properly, on top of that the syslog data is going over correctly.
Can anyone please show me the way forward? I thank you in advance for your kind assistance.
... View more
01-13-2013
11:54 PM
I concur Lisa's suggestion. Using the forwarder will be useful when deploying in large enterprises. If you do not use scripted inputs, it will also allow business continuity. You can further use a deployment server, to manage it when you have too many forwarders to look at.
... View more
12-15-2012
01:32 AM
1 Karma
I wonder if there is any site in splunk Docs that clearly define the distinct differences between the two of them. I am having trouble deciding which one to use.
... View more
- Tags:
- search-time
12-13-2012
06:57 PM
martin I can't get internet access on that Linux VM box i'm using... Frustrating... I needed to vary from the standard dashboards that i am creating because they are in time frames longer than prescribed.
... View more
12-13-2012
08:00 AM
I am trying to build dashboard offline to count license usage. I can't bring the work in. I can only build it via remotely. The client isn't aware of what he would like to do with splunk other than checking out on the $$ it costs. I just want to be able to input data into this file in Splunk's convention and sourcetypes so i can build dashboards off it and then the user just have to copy and paste my Customized app for him to use. No need to worry about it not being able to work in a new setup if the 1st server fails.
... View more
12-12-2012
11:59 PM
I would like to ask how can I 'fake' or create input of fields with values for splunk's license_audit.log to consume. which source type to put to? Is there a tool to create such sample logs?
Has anyone done this act before?
... View more
11-27-2012
10:35 PM
Hi Drainey, Sorry for being thick here but how is it that Splunk can make webpages show without having any index.html. I"m not the best person to ask when it comes to web page creation and HTML. Would you give me some advice on this? Link me and i will read just like the Jquery you taught me. http://docs.jquery.com/Tutorials:How_jQuery_Works
I followed the demo it was powerful.
... View more
11-27-2012
12:47 AM
Hi sdaniels, I'm not trying to configure forwarders from UI or using a deployment server. I'm trying to make a change to the manager page in splunk. Something like if you have a webpage, you edit the index.html. so i need to know how to do it on splunk's index.html. or if you can give me a hint on where that lies.
... View more
11-20-2012
12:13 AM
Is there anyone who can help? Desparate here.
... View more
11-14-2012
07:30 PM
Is there anyone out there? Splunk support guys please give me a hint!
... View more
11-14-2012
01:01 AM
I am not sure if anyone has attempted this, but i would like to ask how to change the options shown in manager.
E.G. I am trying to add a simple link which will link me to the "configure forwarding" page within "forwarding and receiving" section.
Is there any resources on how we can change the options on a search head and do the needful?
... View more
05-18-2012
12:24 AM
there's an ip assignment app which you can't see outright. you can look for it under Edit . the app name is Virtual network editor, if you're using VMware workstation or server.
... View more
05-18-2012
12:14 AM
I think there is no field called Type=Error I looked up www.ultimatewindowssecurity.com. It doesn't seems to have a field by that name. Unless it is just a metaphor.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-05-2020
02:02 AM
|
Karma from
