Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About p_gurav
p_gurav
Champion
Member since:
09-17-2014
07-27-2020
Community Statistics
| Posts | 970 |
| Solutions | 63 |
| Karma Given | 12 |
| Karma Received | 146 |
| Member Since | 09-17-2014 |
Activity Feed
- Got Karma for Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?. 02-25-2024 04:25 AM
- Got Karma for Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?. 01-05-2024 12:57 PM
- Got Karma for Re: Search peer indexer1 has the following message: License Manager: Failed to contact license master: reason='Unable to connect to license master:. 07-31-2023 06:22 AM
- Got Karma for Re: How to forcefully change the current search head captain to actual captain in the search head cluster Environment ?. 07-12-2023 02:24 PM
- Got Karma for Re: round in addcoltotals. 02-10-2023 12:04 PM
- Got Karma for Re: How to forcefully change the current search head captain to actual captain in the search head cluster Environment ?. 10-10-2022 01:46 AM
- Got Karma for How to split a json array into multiple events with separate timestamps?. 09-21-2022 02:16 AM
- Got Karma for Re: splunk dbconnect how to obtain a list of all database connections. 09-02-2022 09:56 AM
- Got Karma for Re: splunk dbconnect how to obtain a list of all database connections. 06-08-2022 08:39 AM
- Got Karma for Re: How do I disable the auto refresh delay on all dashboards?. 02-01-2022 01:51 AM
- Got Karma for Splunk false alerts. 10-25-2021 08:26 AM
- Got Karma for Re: Splunk upgrade from 7.x to 8.x. 09-13-2021 03:15 AM
- Got Karma for Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?. 09-10-2021 03:03 AM
- Got Karma for Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?. 08-19-2021 01:44 PM
- Got Karma for Re: datamodel command for multilevel data model child datasets. 12-04-2020 11:57 PM
- Got Karma for Re: datamodel command for multilevel data model child datasets. 12-04-2020 11:56 PM
- Got Karma for Re: Splunk Enterprise not working. 11-02-2020 05:47 AM
- Got Karma for Re: After downloading the free trial, why do I get the error "cannot accept license agreement"?. 11-02-2020 04:08 AM
- Got Karma for Re: Summary Indexing give duplicated records. 08-05-2020 01:48 PM
- Got Karma for Re: Not able to open Splunk folder available in C:/Program files. 06-16-2020 03:39 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 4 | |||
| 5 | |||
| 0 | |||
| 2 |
06-12-2020
03:58 AM
1 Karma
Did you run CLI as an administrator? Also, go to services by ctrl+R and check the owner of the Splunk and check the Splunk folder permission as well.
... View more
06-12-2020
03:01 AM
Hi, It is possible that Splunk is running as administrator and you are not part of that group. Please check the services to identify which user Splunk running as. Also, you can open the command prompt with run as administrator and access Splunk folders on CLI.
... View more
06-11-2020
11:12 PM
Did you create an Airbnb2 index while uploading data? You can verify in the settings->indexes, if it is being created or not. If not, you can create it while uploading the data. Refer to this documentation: https://docs.splunk.com/Documentation/Splunk/8.0.4/Data/Modifyinputsettings#Index
... View more
06-11-2020
10:54 PM
1 Karma
Please try with the different browser other than internet explorer. As the 8.0.4 version of Splunk only supports The latest versions of Chrome, Firefox, and Safari browsers. Here is the documentation for the reference: https://docs.splunk.com/Documentation/Splunk/8.0.4/SearchTutorial/Systemrequirements
... View more
06-11-2020
10:46 PM
Hi Ashvini, Here is the Splunk document which you can refer to, they also give some examples which will help to understand better. https://docs.splunk.com/Documentation/Splunk/8.0.4/AdvancedDev/CustomAlertConvertScripted
... View more
04-23-2020
03:44 AM
You need to look at two files status_overview.css and status_overview.js at "/opt/splunk/etc/apps/website_monitoring/appserver/static".
... View more
04-07-2020
01:38 AM
This may help:
https://answers.splunk.com/answers/754566/how-to-compare-two-fields-from-two-different-searc.html
... View more
03-20-2020
08:42 AM
Hi hazemfarajallah,
Try to use Splunk windows add-on from splunkbase.
It will have more configuration examples for perform, WMI etc for windows operating system counters.
Refer to this documentation for more details.
... View more
01-31-2020
03:27 AM
ok. and what is the indexer's timezone? Also, In props.conf put TZ= Asia/Jerusalem .
... View more
01-31-2020
02:44 AM
What is the data source for this logs? If this are access logs then try to use splunk predefined sourcetypes.
... View more
01-31-2020
02:43 AM
Did you set any default timezone for your user? Also, check the system timezone.
... View more
01-27-2020
05:06 AM
@pratapa could you try sending manual email from search command? Check if user getting an email for the same.
... View more
01-27-2020
04:50 AM
1 Karma
This may help you:
index=_audit action=search search=* sourcetype=audittrail | rex field=search "sourcetype\s*=\s*\"*(?<SourcetypeUsed>[^\s\"]+)" | rex field=search "index\s*=\s*\"*(?<IndexUsed>[^\s\"]+)" | search IndexUsed=* OR SourcetypeUsed=* | fillnull value="NA" IndexUsed SourcetypeUsed| stats count by IndexUsed SourcetypeUsed
The count represents a number of searches execution that are using that index/sourcetype.
... View more
01-23-2020
11:12 PM
1 Karma
Hi sahabhi606,
In terms of steps:
1. Test your apps and make sure they are compatible with 8.0 (you need to go to Splunk base and check if they are compatible)
2. Upgrade Deployment Server (disable it first, then upgrade, do not restart it yet)
3. Upgrade Search Heads
4. Upgrade Indexers (once completed you can now restart your deployment server)
5. Upgrade Forwarders
While upgrading the indexer cluster follows steps mentioned in:
https://docs.splunk.com/Documentation/Splunk/8.0.1/Indexer/Upgradeacluster
While upgrading the search cluster follows steps mentioned in:
https://docs.splunk.com/Documentation/Splunk/8.0.1/DistSearch/UpgradeaSHC
For more info:
https://docs.splunk.com/Documentation/Splunk/8.0.1/Installation/UpgradeyourdistributedSplunkEnterpriseenvironment#Upgrade_a_distributed_environment_with_multiple_indexers_and_non-pooled_search_heads
... View more
12-19-2019
04:12 AM
1 Karma
You can create global settings as
[default]
coldToFrozenDir =
Splunk will automatically create the subfolders according to the index.
OR
Try running coldtofrozen script and change the directory path. Refer to this link:
https://answers.splunk.com/answers/38825/coldtofrozendir-per-index.html
... View more
11-07-2019
08:37 PM
Can you try:
[monitor://D:\[path]\logs\localhost_access_log*.txt]
disabled = 0
Also, please find here more examples of wildcards.
... View more
11-07-2019
12:14 AM
Could you share the indexes.conf? Also, on which Splunk instance wrote your inputs.conf?
... View more
10-21-2019
12:39 AM
Which Splunk version you are using?
... View more
09-19-2019
12:18 AM
Could you please tell Splunk and IE version you are using?
Also, Splunk Enterprise does not support IE in Compatibility Mode.
... View more
09-06-2019
05:32 AM
This may help:
https://docs.splunk.com/Documentation/Splunk/7.3.1/DistSearch/SHCrollingupgrade
... View more
08-28-2019
03:37 AM
If you have monitoring console set, please check indexing performance on indexers. Is any indexing queue is getting full?
... View more
08-28-2019
03:10 AM
1 Karma
Search only Config: Topology in settings searches and reports, filter for Splunk AWS app. It will list all topology generator saved searches.
... View more
08-28-2019
02:07 AM
This may help:
https://answers.splunk.com/answers/84781/replace-one-backslash-by-double-backslash.html
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
07-27-2020
02:54 AM
|
Karma given to
