About dude49

dude49 · ‎09-30-2024

Thanks this fixed the issue, added the stanza [indexAndForward] and they all popped right backup after the restart. Beautiful!!!!

dude49 · ‎09-30-2024

I did a recent upgrade of Splunk, but now notice my clients are not phoning in for some reason. This is my first upgrade in production environment, any help troubleshooting would be great. I still see my client configs on the backend but not sure why they are not reporting on the GUI.

dude49 · ‎09-30-2024

So I did some research of when the uptick happened. It started last Monday before I starting upgrading Splunk. I blacklisted the host that were having the large amount of audit logs and reached out to the department for those host. Looks like it wasnt an app but servers possibly added or ingesting more due to a change. Will find out more once the department responds. Until then, will keep them blacklisted so that we stay under our license amount

dude49 · ‎09-27-2024

My linux_audit logs increased after updating apps and causing license manager to go over limit. Anyone know a fix for this, I have looked for the stanzas on the backend but not able to find out where these logs are coming from.

dude49 · ‎05-20-2024

Search Head GUI is not working. Found error in the splunk.d logs, not sure if it pertains to why gui is down. Anyone have experience with this happening? SH GUI is not responding, looked into the logs and found this error. Anyone have an experience with this or know of any fix? TsidxStats - sid:summarize_1591771322.7666 Failed to contact the server endpoint https://127.0.0.1:8089 from touchSummary()

dude49 · ‎05-14-2024

Hey guys, I am working a report that needs to show any new employees coming into the company for the last 30 days. Right now I have a report constructed that pulls data for over the last 30 days on all employees for the company. How can I filter out this report to only show employees added to the company the previous month over the last 30 days? I will schedule this report to run weekly.

Posts	6
Solutions	0
Karma Given	4
Karma Received	2
Member Since	‎05-14-2024

Online Status	Offline
Date Last Visited	‎10-01-2024 06:27 AM

Upgrade from 9.1.3 to 9.2.2

linux_audit logs

Search Head GUI

Employee report

Re: Upgrade from 9.1.3 to 9.2.2

Upgrade from 9.1.3 to 9.2.2

Re: linux_audit logs

linux_audit logs

Search Head GUI

Employee report