Activity Feed
- Got Karma for Re: Is there a yum/rpm repo for Splunk?. 12-01-2020 10:00 AM
- Got Karma for Where is splunk_for_vmware_forwarder_appliance. 06-05-2020 12:48 AM
- Got Karma for How to install an SSL key from a trusted certificate authority?. 06-05-2020 12:48 AM
- Got Karma for Why does my search peer come up as an error on my search head?. 06-05-2020 12:48 AM
- Got Karma for Re: After using exporttool and importtool to copy buckets from one environment to another, why is the imported data not searchable?. 06-05-2020 12:47 AM
- Got Karma for splunk list deploy-clients question. 06-05-2020 12:46 AM
- Got Karma for Moving licenses. 06-05-2020 12:46 AM
- Got Karma for Re: Is there a yum/rpm repo for Splunk?. 06-05-2020 12:46 AM
- Got Karma for Re: Is there a yum/rpm repo for Splunk?. 06-05-2020 12:46 AM
- Got Karma for Re: Is there a yum/rpm repo for Splunk?. 06-05-2020 12:46 AM
- Got Karma for Filter results AFTER transaction function. 06-05-2020 12:45 AM
- Got Karma for Filter results AFTER transaction function. 06-05-2020 12:45 AM
- Got Karma for Filter results AFTER transaction function. 06-05-2020 12:45 AM
- Got Karma for Report only if exists in external lookup. 06-05-2020 12:45 AM
- Got Karma for Report only if exists in external lookup. 06-05-2020 12:45 AM
- Got Karma for Concatenate fields into string on form. 06-05-2020 12:45 AM
- Posted Why is my defined "cliLoginBanner" banner not working? on Deployment Architecture. 04-19-2017 10:38 AM
- Posted Re: Is there a yum/rpm repo for Splunk? on Security. 03-22-2017 06:44 AM
- Posted Re: Splunk DB Connect: How to resolve "JRE Status: Unsupported JRE detected" error? on All Apps and Add-ons. 12-13-2016 07:57 AM
- Posted Re: Splunk DB Connect: How to resolve "JRE Status: Unsupported JRE detected" error? on All Apps and Add-ons. 12-13-2016 07:54 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 1 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
04-19-2017
10:38 AM
I have a brand new instance of Splunk Enterprise. I have modifed system/local/server.conf and added the cliLoginBanner directive. However, my defined banner text is not showing up upon login.
Not sure how to trouble shoot this one.
... View more
03-22-2017
06:44 AM
4 Karma
This is a really old thread, but I wonder if there is an update. It would Splunk would have put a repo up by now.
... View more
12-13-2016
07:57 AM
This resolved it. Thanks so much!!!!
... View more
12-13-2016
07:54 AM
I have tried both openjdk and oracle jre. Currently I have installed jre1.8.0_111.x86_64 via yum, and jre-8u111-linux-x64.rpm via rpm. The JRE full path is /usr/lib/jvm/jre.
/bin/java -version
java version "1.8.0_111"
Java(TM) SE Runtime Environment (build 1.8.0_111-b14)
Java HotSpot(TM) 64-Bit Server VM (build 25.111-b14, mixed mode)
... View more
12-13-2016
07:39 AM
I have read every article I can find on here to resolve this issue and nothing seems to work. I have installed Splunk DB Connect, but when trying to point to the JRE, I get the apparently common error...
JRE Status: Unsupported JRE detected
Using Oracle Corporation JRE version 1.8, OpenJDK 64-Bit Server VM
Need Oracle Corporation JRE version 1.8
I've removed and installed every version I can find and nothing seems to work.
Please anyone that thinks they can help, let me know what information I might provide to assist you in assisting me.
Thanks in advance.
... View more
09-13-2016
10:52 AM
Yes, I have added it as a search peer and it shows in the list as healthy. yet, does not show up in DMC.
... View more
09-13-2016
09:59 AM
I'm sure this is going to be something simple. I have a small Splunk POC environment consisting of a cluster master, 3 indexers, and 2 search heads. When pulling up the DMC on the master, I see all 3 indexers, itself (the master), and 1 search head. But the other search head never shows up. I've even erased and reinstalled Spunk on this search head to no avail. It IS reporting to the license server, and I can search my data with it. Just can't see it in DMC.
Thanks
... View more
09-13-2016
08:34 AM
That was it. Had duplicate IP's in the server.conf file. Not sure how that happened but good call.
Interestingly the same search head is not being seen by the Distributed Management console and this didn't resolve that problem.
... View more
09-13-2016
08:17 AM
1 Karma
I've added a search head as a search peer and it's come up as "sick" with the following error. Can't seem to find any reference to it here.
Error [00800000] Failed 11 out of 11 times. Servername used by peer is already in use by the search head.
It suggests a dns issue, but none exists that I can see.
... View more
08-31-2016
11:20 AM
Making progress...
I can now access the OVA front end and have configured the add-on. However, when I provide VCenter credentials, I get green on VC Credential Validation, but red on Collecting from. "Error getting host list from server"
Thanks
... View more
08-31-2016
10:54 AM
I figured it out. You can sudo passwd root and change the root pw
... View more
08-31-2016
10:51 AM
Tried 8443 and 8000
... View more
08-31-2016
10:47 AM
OK, I already hit my first snag. Our environment does not have DHCP. So when the OVA is installed, it tries to get an address and can't. However, when I try to modify the ifcfg-eth0, as user splunkadmin, it won't let me write as it's owned by root. How can I change the IP from DHCP to static?
... View more
08-31-2016
10:25 AM
I'm sorry. I'm just getting back to this as I moved to a different app installation. I went back and looked and I don't find what I was referring to. I'm going to start from scratch today and will let you know if I find that reference.
... View more
08-31-2016
07:26 AM
Hi and thanks for the replies. DWaddle, I've followed your directions from the slide deck, and all went well, but when trying to start splunk, it sets at "Waiting for web server at https://127.0.0.1:8000 to be available.." and never goes anywhere. Don't see anything in the logs but not sure I'm looking in the right place.
... View more
08-30-2016
08:52 AM
1 Karma
The docs clearly show how to install a self-generated ssl key, but we have a cert from a TCA. I can't seem to find docs on how to install this.
Thanks in advance
... View more
08-19-2016
06:51 AM
1 Karma
I feel dumb even asking this. But, I am trying to get the Splunk app for vmware up and running. I am told to create the virtual machine splunk_for_vmware_forwarder_appliance, but I can not find this ovf file anywhere. Can someone point me to where it's at?
Thanks
... View more
08-18-2016
09:38 AM
I have installed the Splunk App for VMware. However, I am unable to install a trial license as the "Fix" button referenced in the documentation does not appear.
It simply says "You have no license for Splunk App for VMware. Contact sales for a license.
Add or inspect licenses"
... View more
08-01-2016
06:46 AM
Fortunately this is not a production environment. So the loss of data is actually a good lesson learned for production. Thanks!
... View more
07-28-2016
02:01 PM
I had to rebuild my two slave indexers, but the master is still intact. However, I lost all data prior to the rebuild. Does the master not maintain a copy of the data? If not, had I rebuilt one, and waited for data replication before rebuilding the second, would I have maintained the data?
Also, how can I determine how long replication from one indexer to another is taking?
... View more
07-01-2016
10:42 AM
When receiving syslog data via UDP:514, is there a way to specify the sourcetype based on the IP address of the device sending the data?
... View more
06-28-2016
11:22 AM
Firewalls are off
... View more
06-28-2016
11:17 AM
Firewalls have all been disabled
... View more
06-28-2016
11:16 AM
I see nothing in the btool for those entries besides splunk_httpinput
... View more
06-28-2016
11:10 AM
I just discovered something. Now, since I added this app and inputs, the UDP 514 data is not getting indexed into any index. Neither main nor poc.
Didn't find anything else with an associated transforms.
... View more
