Hello, Pls advise how one can backup from an existing splunk (7.0) and restore the saved splunk's data to another new splunk (latest version). I can schedule a shutdown for the backup/restore. Thanks ... View more

Hello, 1.I've installed Spunk 7.0 / Win2012r2, Splunk Machine Learning Toolkit App 3.1.0, Python for Scientific Computing Add-on 1.2. 2.If i install "Splunk SDK for Python 1.6.3", i would need to install Python 2.7. Will this "crash" w/ my splunk machine learning toolkt? Pls. advise. Thanks ... View more

Hello, I'm new to Splunk. Need advice. Want to do a count-up (Step) when a Tag's value (PV) transits from 0 to 1. Step is a new field. _time PV Step 3/24/2018 11:00:00 1 0 3/24/2018 11:00:01 1 0 3/24/2018 11:00:02 1 0 3/24/2018 11:00:03 0 0 3/24/2018 11:00:04 0 0 3/24/2018 11:00:05 1 1 3/24/2018 11:00:06 1 2 3/24/2018 11:00:07 1 3 3/24/2018 11:00:08 1 4 3/24/2018 11:00:09 0 0 3/24/2018 11:00:10 0 0 3/24/2018 11:00:11 0 0 3/24/2018 11:00:12 0 0 3/24/2018 11:00:13 0 0 3/24/2018 11:00:14 1 1 3/24/2018 11:00:15 1 2 3/24/2018 11:00:16 1 3 3/24/2018 11:00:17 1 4 3/24/2018 11:00:18 1 5 3/24/2018 11:00:19 1 6 3/24/2018 11:00:20 1 7 3/24/2018 11:00:21 0 0 3/24/2018 11:00:22 0 0 3/24/2018 11:00:23 0 0 3/24/2018 11:00:24 0 0 3/24/2018 11:00:25 0 0 Pls. advise. Thanks ... View more

Hello, I'm new to Splunk. Need some advice, I need to do as follows: Pls. see attached, the sample. Tag 1 = ProductionState: 0 (for 30 sec), 1 (for 90 secs), then repeat. An event is generated every 1 sec (i.e. TagAlias=ProductionState, Value=<0 or 1>) Tag 2: WireTensionLeft: 0 (for 1 sec), 10 (for 1 sec), …, 100 (for 1 sec), then repeat. An event is generated every 1 sec (i.e. TagAlias=WireTensionLeft, Value=<0,10, ..., 100, 0,...>) Requirement 1.Retrieve Tag1 – Value at 10 sec, 20 sec, & 75 sec, when Tag2 – Value = 1 Pls. advise. Thanks ... View more

Hello All, My client's machine generates a daily data log (in csv format). How do one configure splunk to read & index the past 1 day of data. The csv file has the following format. Header >> Datetime, Tag1, Tag2 Row1 >> 2017-07-01 23:00:00, 23.45, 12.56 Row2 >> 2017-07-01 23:01:00, 33.45, 22.56 Pls. advise. Thanks ... View more

Hello, Is possible to replace Splunk's background w/ another? ... View more

Hello Everybody, I've a table (w/o the yellow column), as shown below. I want to eval another field (in yellow). It shows the difference between the LatestValue, by Category2, TagName, FiscalDate (number). Pls. advise. Thanks. ... View more

Hello, I found that my dashboard returns incorrect result sometimes when I configure the saved search with acceleration. I notice that this happens when the dashboard returns the results quickly (w/o the search progress bar). Works okay when I uncheck "acceleration" for the saved search. Any ideas? ... View more

Hello, When I run as a power user, I found that one of the dashboards returns an error: "unknown search command, gauge". When I run as administrator, it works okay. See attached. As Power User: As Administrator: ... View more

Hello, Would like to set a token when the user opens a dashboard. Pls. advise. Thanks. ... View more

Hello, Setup: 1.Install SQL2008R2 on Win2008R2 2.Install JDE 8 (jdk-8u74-windows-x64.exe). 3.Install Splunk 6.3.3 4.Install "DB Connect 2" app 5.Run Splunk -> DB Connect App. Splunk shows "blank page" (tab shows "loading...") 6.Check for cert at $SPLUNK_HOME/etc/apps/splunk_app_db_connect/certs/default.jks. Found Cert is missing 7.Create C:\Program Files\Splunk\etc\apps\splunk_app_db_connect\local folder. Create C:\Program Files\Splunk\etc\apps\splunk_app_db_connect\local\inputs.conf. Add line (to change port #): [rpcstart://default] port = 9085 8.Run Splunk -> DB Connect App. Splunk shows "blank page" (tab shows "loading...") Pls. advise. Thanks. ... View more

Hello, I've configured lookup, using a csv file. I've loaded the csv file, configure the lookup definition & automatic lookup. It works okay. When there are changes in th csv file (i.e. add in new rows), how can i do a reload? Thanks. ... View more

Hello, I've read the forum. I found that one can change the dashboard's background color using the dark.css. Add form tag "stylesheet=dark.css" Found that the gauge's range has changed to black, too. Pls. advise how to correct this. Please advise what CSS file the dashboard uses. ... View more