In reviewing the scheduler.log, I see the following warning. What does this mean? 06-03-2010 06:08:24.796 WARN SavedSplunker - Saved splunk failed to get current user context

Somewhat odd behavior, my deployment server stopped generating log entries. I've been using the searches from http://answers.splunk.com/questions/2038/whats-the-best-way-to-monito …

Hello, I have a central splunk server, a splunk server specifically for the PDF Server application, and my mail server. When I run a report on SPLUNK-PDF it routes through the ma …

There's an app on Splunkbase for WebSphere, but is anyone building a similar app for Tomcat?

Currently, when any of my users create a saved search, they are private. How can I alter that to be public? Also, is there a way to restrict which users have default public an …

Hi, I've got the advanced view below, which has the aim of producing a search-by-domain page for some Apache-like logs I've got Splunk indexing. The idea here is that there is a …

I'm having the same issue documented here http://www.splunk.com/support/forum:SplunkGeneral/3130 "An example is the Unix app. When this app is pushed to a Splunk instance using th …

I'm getting this error in splunkd.log on Windows 7 What does this mean and how can it be corrected? 08-15-2010 05:18:01.854 FATAL MetaData - failed to rename D:\SPLUNK\var\lib\sp …

Hi, Trying to send all eventIDs from WinEventLog:Security to NullQueue with the exception of 592 and 593. Still getting all security events indexed :< props.conf and transfo …

The initial splunk version we had was 4.0.x, we recently upgraded to 4.1.3 , since then our nagios alerts for splunk have started showing up, we use LDAP in our splunk base, the …

Anyone tried to swap out the amMap flash map in the Cisco Security App and replace it with the new google maps app? How hard is it? How is the performance compared to the flash a …

We are trying to get Splunk to monitor a cluster of federated WebSphere Application Server v6.1 instances, which are centrally managed through a WebSphere Network Deployment (ND) A …

I am forwarding a single source (file) from kiwisyslog with LFW to the indexer, so got 1 sourcetype [kiwisyslog] Then I am overriding the hosts and sourcetypes. props.conf [kiwi …

What's the best way to preserve legitimate errors/warnings on a dashboard that uses |inputlookup to populate dropdowns or other UI elements, while suppressing the following message …

Hi, I have a development support question. We have an application that is integrated with splunk. We have a C++ program that was written as a plugin (bundle or application now …