About cbreshears_splu

cbreshears_splu · ‎08-19-2020

The second link is the direct link to the shopping cart for the Instructor on Demand version of the course. This is a self-paced version of the course. Taking Splunk Fundamentals Part 1-3 is highly suggested (not required) since Advanced Searching and Reporting builds directly on concepts taught in those courses. If you have any other questions please reach out to the Education Team at : education_amer@splunk.com

cbreshears_splu · ‎06-17-2019

You will want to do this on your deployer to sync across your deployment: https://docs.splunk.com/Documentation/Splunk/7.3.0/Security/Resetapasswordinadistributedenvironment

cbreshears_splu · ‎07-27-2018

What are the proxy settings on this system? This can be caused by something proxying the requests to localhost.

cbreshears_splu · ‎07-20-2018

Material slides are for demonstration purposes only and do not match data provided for labs. Please use the lab module documents when working with lab server(s).

cbreshears_splu · ‎07-20-2018

It sounds like you are doing the scenarios from the course materials slides on the lab server. The material slides are for demonstration purposes only and do not match all data provided for labs. Please use the lab module documents when working with the lab server(s).

cbreshears_splu · ‎07-20-2018

Hello, which course are you taking? We are not seeing this issue with the Fundamentals Pt1 eLearning course (the course that uses the _wcookie sourcetype). Please contact us at elearn@splunk.com so that we can help troubleshoot.

cbreshears_splu · ‎06-20-2018

Biggy, it sounds like you might have ingested the data incorrectly. Please send an email to elearn@splunk.com and we will help you troubleshoot.

cbreshears_splu · ‎05-30-2018

Thanks, changed to reflect correct name.

cbreshears_splu · ‎05-02-2018

amielke, are you using 7.1? If so, read the accepted answer. You will need to set the password in the user-seed.conf file.

cbreshears_splu · ‎05-01-2018

How to do this in 7.1 + : Stop Splunk Enterprise Find the passw file for your instance ($SPLUNK_HOME/etc/passwd) and rename it to passwd.bk Create a file named user-seed.conf in your $SPLUNK_HOME/etc/system/local/ directory. In the file add the following text: [user_info] PASSWORD = NEW_PASSWORD In the place of "NEW_PASSWORD" insert the password you would like to use. Start Splunk Enterprise and use the new password to log into your instance from Splunk Web. If you previously created other users and know their login details, copy and paste their credentials from the passwbk file into the passwd file and restart Splunk. Versions prior to 7.1 : Stop Splunk Enterprise Find the passw file for your instance ($SPLUNK_HOME/etc/passw) and rename it to passw.bk Start Splunk Enterprise and login to your instance from Splunk Web using the default credentials of admin/changeme. You will be asked to enter a new password for your admin account. If you previously created other users and know their login details, copy and paste their credentials from the passw.bk file into the passwd file and restart Splunk.

cbreshears_splu · ‎07-21-2017

The end date for your courses will be contained in the email you received when you first signed up.

cbreshears_splu · ‎07-10-2017

A link to the sample data for the Fundamentals One course can be found in task one, step one of the module 4 lab documentation. If you continue to have issues, please contact : elearn@splunk.com

cbreshears_splu · ‎10-14-2016

You can also find many free how-to videos at: https://www.youtube.com/channel/UCjwOFZzLPnji1EstaVyyvAw

cbreshears_splu · ‎05-06-2016

You are correct. The statement should be : "Lookup data can not be used in a calculated field, because lookup data does not exist at the time of calculation." Not that calculated fields can not be used with lookups. This bug will be fixed on next release of the course. Here are the details from the Docs: You cannot base calculated fields on lookup fields. It won't work if you try. This is because, as mentioned above, the evaluation of calculated fields takes place after search-time field extraction and field aliasing, but before derivation of lookup fields.

Posts	15
Solutions	4
Karma Given	0
Karma Received	49
Member Since	‎10-04-2014

Online Status	Offline
Date Last Visited	‎08-19-2020 10:25 AM

Re: advanced search and reporting training

Re: How to Reset the Admin password?

Re: EOF occurred in violation of protocol (_ssl.c:...

Re: Has anyone notice the typo's in the new 7 fund...

Re: Has anyone notice the typo's in the new 7 fund...

Re: Has anyone notice the typo's in the new 7 fund...

Re: Has the sample data or the lab changed for Fun...

Re: How to Reset the Admin password?

Re: How to Reset the Admin password?

Re: How to Reset the Admin password?

Re: Where do I find the end date of a 30-day eLear...

Re: There is no test data for some of the Fundame...

Re: Are there any Splunk training materials for ne...

Re: Is there an error in the "Creating Splunk Know...