About kdulle

kdulle · ‎03-23-2023

Ditto here. I hammered on it for about a day, and finally just went back to udp. I may just have to configure a vpn tunnel to send it through as a work around, sad.

kdulle · ‎03-14-2023

Yes, I can confirm that when I added that to splunk-launch.conf the python message went away. Thanks for clarifying your issue above yesterday on using two different certs causing the problem. My issue ended up being a typo in the sslRootCAPath in server.conf. I appreciate your quick replies.

kdulle · ‎03-13-2023

I'm seeing the same thing. Let me know if you find out more. Pretty sure this python warning was new after the upgrade as well. Upgrading from 9.0

kdulle · ‎10-30-2020

I have had success using a tcp stream (most diodes will simulate a 3-way handshake) between indexers/HFs sending uncooked data. Though it makes parsing kind of fun on the down stream indexers. Either way, I find this response to be the most in-depth and accurate.

kdulle · ‎11-07-2019

Thanks Giuseppe. That's pretty much what I have been doing. I was hoping for a quick reference or a cheat sheet that just lists all of the options, but I think the Dashboards and Visualizations documentation will get me what I need.

kdulle · ‎10-29-2019

For example, if I wanted to see all of the possible options that are available for configuring a chart on a dashboard. I know the Splunk dashboard app has a lot of them in the example dashboards, but I was hoping for some type of document or web page that lists them all out. And maybe even a short description. I've done some looking, but haven't been able to locate this type of info on the Splunk website. Am I missing something here? Please guide me if I have just overlooked it.

kdulle · ‎01-24-2018

You mention that you want the results to show both C and E, but actually the only one that appears to be missing from the lookup is C. So if you are interested in finding out what is missing from both, you may want to try using the diff command. Something like: | set diff [ | inputlookup devices.csv ] [ search index=<your_index> devices=* | table devices]

kdulle · ‎01-24-2018

This worked great for me to identify which devices were missing from a search compared to my lookup table. I just had to change from="data" to from="lookup" in the where statement to reverse the result. Thanks!

Posts	8
Solutions	0
Karma Given	8
Karma Received	1
Member Since	‎01-24-2018

Online Status	Offline
Date Last Visited	yesterday

Is there a list of all of the dashboard components...

Re: SSL error with tcp-ssl input

Re: Why can't I use cliVerifyServerName = True wit...

Re: Why can't I use cliVerifyServerName = True wit...

Re: Splunk forwarder behind a one way data diode. ...

Re: Is there a list of all of the dashboard compon...

Is there a list of all of the dashboard components...

Re: How to search what values are missing in my lo...

Re: How to search what values are missing in my lo...

Join the Conversation