About dineshraj

dineshraj · ‎07-27-2015

Just add the new monitor and sourcetype in inputs.conf, it will starting showing the data. If you want specific processing add configurations in props.conf for the sourcetype..

dineshraj · ‎07-27-2015

Try using the rest endpoint to create indexes, it won't ask you for a restart. But you need to run the command on all your indexers - curl -k -u : https://indexer:port/servicesNS///data/indexes -d name=

dineshraj · ‎07-21-2015

Add below code to your transforms.conf - [mytestsourcetype] DELIMS = ";" FIELDS = "Date", "Time", "Site Instance"....

dineshraj · ‎11-27-2014

I want a list of all the reports part of a summary index.

dineshraj · ‎08-12-2014

I get a message "waiting for your queued job to start" while running search queries. Anybody knows why this message is showing up?

Posts	5
Solutions	1
Karma Given	3
Karma Received	2
Member Since	‎08-12-2014

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

How can I list all the reports of a summary index?

Why am I getting "waiting for your queued job to s...

Re: How to add a new sourcetype to an existing ind...

Re: Why does Splunk ask me to restart when I creat...

Re: configure sourcetype to an application

How can I list all the reports of a summary index?

Why am I getting "waiting for your queued job to s...