Thread Info | |||||
---|---|---|---|---|---|
Folks,
I wrote perl script to run search on remote splunk server. By default the search only returns first 100 eve...
by
shahhe
Explorer
in
Getting Data In
01-28-2011
|
1
|
4
| |||
I am trying to calculate the hardware requirements for a Splunk installation.
The main issue I have is that the h...
by
mcwomble
Path Finder
in
Getting Data In
01-27-2011
|
2
|
1
| |||
Please see my log entries below:
1
11-1-27 下午01:40:01.000
Jan 27 13:40:01 202.XX.XX.XX postfix/qmgr[2866]: B3...
by
dikaye
Path Finder
in
Getting Data In
01-27-2011
|
0
|
1
| |||
I am monitoring a folder which contains windows event log stored in .evt/.evtx files. I would like to have this data ...
by
jbsplunk
Splunk Employee
in
Getting Data In
01-26-2011
|
6
|
1
| |||
How can I order the results by time (_time + _subsecond fields) and then by host field?
Thanks.
by
shahhe
Explorer
in
Getting Data In
01-25-2011
|
0
|
6
| |||
I have a 1GB license and I am trying to contain my daily indexing so that I don't exceed the maximum indexing volume ...
by
benstraw
Splunk Employee
in
Getting Data In
02-08-2010
|
3
|
3
| |||
I am trying to index a file that looks like the following:
1,"Location" 2,"Attack Type" 3,"Impact" 4,"Exploit" 5,"...
by
jambajuice
Communicator
in
Getting Data In
01-11-2011
|
1
|
3
| |||
I have results that look like the following
dest_ip, dest_port, protocol, cve_id, score
192.168.1.1, 80, tcp, ...
by
jambajuice
Communicator
in
Getting Data In
01-25-2011
|
1
|
1
| |||
I had instances where many of my forwaders filled up disk partition to go full.
How can I disable all logging? Ofc...
by
clyde772
Communicator
in
Getting Data In
01-25-2011
|
0
|
1
| |||
We've got a fairly chunky installation and generally things hum along nicely. However sometimes I get a situation whe...
by
stuartamurray
Path Finder
in
Getting Data In
01-24-2011
|
0
|
3
| |||
We have a forwarder/receiver topology configured here. Each of the 200 or so servers have a light forwarder their inf...
by
jcbrendsel
Path Finder
in
Getting Data In
01-22-2011
|
0
|
1
| |||
Hello, I have a big log file that is set to be sourcetype=my_log and it basically looks like this:
--- begin_reque...
by
cppforlife
New Member
in
Getting Data In
01-20-2011
|
0
|
2
| |||
I have a Splunk server that receives data from 2 normal (not light) forwarders.
In the forwarders, I had to create...
by
ruiaires
Path Finder
in
Getting Data In
01-20-2011
|
1
|
2
| |||
Hi all,
i know there are a few other questions with good answers about my topic but I still have my problems. Thi...
by
Christian
Path Finder
in
Getting Data In
01-06-2011
|
1
|
2
| |||
On 64 bit Windows, if the download is correct (64 bit), the user is running as Administrator, Splunk is installed as ...
by
ndoshi
Splunk Employee
in
Getting Data In
06-17-2010
|
0
|
10
| |||
Hi, All.
Is there a way to send a unique system ID from a forwarder to a Splunk indexer along with the logs?
I...
by
tgiles
Path Finder
in
Getting Data In
01-19-2011
|
0
|
4
| |||
I'm running version 4.0.8 splunk on Windows 2000 and it continually generates the following error.
Application po...
by
mctester
Communicator
in
Getting Data In
04-14-2010
|
0
|
4
| |||
Hi I've recently installed Splunk and have set up a couple of our test ESX host to forward syslog data to the Splunk ...
by
CPMSupport
Engager
in
Getting Data In
01-20-2011
|
2
|
3
| |||
I'm trying to use "Monitor Files & Directories" as data input. I got two Data Input sources,
One is script that ru...
by
vivsplunk
Engager
in
Getting Data In
01-18-2011
|
1
|
3
| |||
Is there someway to setup 1 TCP or UDP listening port and have it direct logs to more than one index depending on whi...
by
balbano
Contributor
in
Getting Data In
07-07-2010
|
1
|
6
| |||
I have a source which is csv but has no headers. I'm trying to set up props.conf and transforms.conf to supply these ...
by
cmeo
Contributor
in
Getting Data In
08-10-2010
|
1
|
6
| |||
Is it possible to monitor a log file from a Linux system that is not configured as a LWF? I configured the Data Input...
by
Voltaire
Communicator
in
Getting Data In
06-08-2010
|
0
|
4
| |||
Hi there,
I have noticed a difference in format between the csv files generated by Splunk when e-mail the results ...
by
CerielTjuh
Path Finder
in
Getting Data In
09-16-2010
|
2
|
1
| |||
I noticed a discussion about AIX ver 6 support earlier in the year, however the website still limits the support to 5...
by
digitalcjc
New Member
in
Getting Data In
12-02-2010
|
0
|
3
| |||
Hi,
I have a log file that when ingested using a one shot, all but 3 of the events get stamped with the correct da...
by
Derek
Path Finder
in
Getting Data In
01-13-2011
|
0
|
6
|