Thread Info | |||||
---|---|---|---|---|---|
Hi, I configured Splunk to receive tcp request on port 9000. I configured as well props.conf to parse xml file:
[w...
by
natalija
New Member
in
Getting Data In
11-15-2012
|
0
|
3
| |||
Greetings, Ever since upgrading to Splunk5 I've had an issue where after a random amount of time Splunk will quit log...
by
gmachacek
Engager
in
Getting Data In
11-16-2012
|
0
|
4
| |||
When retrieving EventLogs through WMI, the host value is assigned by a system/detault/props.conf config:
[wmi]
TRA...
by
Paolo_Prigione
Builder
in
Getting Data In
09-24-2012
|
0
|
1
| |||
Hey guys, I guess this is a simple question but all the answers I look at seem very complicated for what I want. I wa...
by
SplunkUser5888
Path Finder
in
Getting Data In
11-16-2012
|
0
|
2
| |||
There are no any events with admonEventType=Update and isDeleted=TRUE when i delete user account, or OU from Active d...
by
sundukevi4
Engager
in
Getting Data In
08-10-2010
|
1
|
1
| |||
Hi all, while i am using delete command to remove my data inputs, i am not able to do that. an error called client do...
by
sruthy
Explorer
in
Getting Data In
11-18-2012
|
0
|
1
| |||
I was wondering how everyone is collecting there VMware ESX/ESXi log files? How are you getting them from the server ...
by
Michael_Schyma1
Contributor
in
Getting Data In
08-21-2012
|
0
|
3
| |||
When the fschange input indexes the full event, I would like to change the sourcetype, apply line breaking rules, and...
by
responsys_cm
Builder
in
Getting Data In
11-09-2012
|
1
|
2
| |||
$SPLUNK_HOME/var/lib/splunk/persistantstorage contains a file fschangemanager_state. This seems to be s SQLite 3.x da...
by
rroberts
Splunk Employee
in
Getting Data In
10-24-2012
|
0
|
1
| |||
When you perform a realtime search (ex 5 minute window) it is using the log's timestamp. As I'm trying to troubleshoo...
by
Runals
Motivator
in
Getting Data In
11-16-2012
|
0
|
2
| |||
Hi, When i click on 'Windows Event Logs' in Add data to Splunk ( please see the below Print-screen )
I am getting...
by
parmatma
Engager
in
Getting Data In
11-16-2012
|
1
|
1
| |||
We have 10+ splunk indexer cluster. However, the disk capacity on these machines is not large enough to hold all our ...
by
nicholasgrabows
Path Finder
in
Getting Data In
11-14-2012
|
0
|
11
| |||
I have a search like this
sourcetype=foo | stats count by host
I have 8 hosts that report to this search and al...
by
hartfoml
Motivator
in
Getting Data In
11-15-2012
|
0
|
2
| |||
Is there a Splunk for Radware app?
I work with a company that is deploying Radware 4408's. A google indicates Radw...
by
davidanso
Explorer
in
Getting Data In
06-29-2011
|
2
|
1
| |||
fschange not indicate a folder for the local machine (windows)
inputs.conf [fschange://C:\testing] index = test po...
by
klychnikov
Explorer
in
Getting Data In
11-15-2012
|
0
|
1
| |||
Is it not possible to create a Drop Down menu populating source files as the input? I have tried using both simple xm...
by
smolcj
Builder
in
Getting Data In
11-06-2012
|
0
|
16
| |||
How can I delete input data and index date to start from scratch ?
Thank you Markus
by
huaraz
Explorer
in
Getting Data In
09-04-2011
|
0
|
4
| |||
Hi all,
I am currently needing to provide our mid-range team with some config to begin monitoring windows registry...
by
aaronnicoli
Path Finder
in
Getting Data In
08-01-2012
|
0
|
2
| |||
Hi,
I want to add a dropdown on to a dashboard, on selection of a values from the dropdowns which can dynamically ...
by
alenseb
Communicator
in
Getting Data In
11-13-2012
|
0
|
3
| |||
There are several questions how to set the internet proxy for the WEB UI. The solutions I have seen require some vari...
by
myou
Explorer
in
Getting Data In
05-09-2011
|
1
|
1
| |||
We create a UDP Data Input on port 524. This shows up as 'udp:524' in the Sources list on the main Search page
I...
by
splunkIT
Splunk Employee
in
Getting Data In
11-14-2012
|
0
|
3
| |||
I'm trying to get the universal forwarder to monitor a particular executable. It would have been nice to do a hash co...
by
plastiiq
Explorer
in
Getting Data In
11-14-2012
|
0
|
5
| |||
How can you change the sourcetype of WinEventLog:Security at input time?
In inputs.conf, adding sourcetype= under...
by
Jason
Motivator
in
Getting Data In
11-12-2012
|
0
|
1
| |||
I've got a few Splunk universal forwarders, running 4.3.3 on a 64-bit Linux. These systems are monitoring approximate...
by
sowings
Splunk Employee
in
Getting Data In
11-08-2012
|
0
|
5
| |||
I'm trying to get a straight forward Splunk CLI command to run on my Windows 7 box;
Execute a save search say MySe...
by
whytepaul
New Member
in
Getting Data In
11-14-2012
|
0
|
1
|