Index 버전을 8.0.7로 업그레이드하려고합니다. 그러나 현재 HP OS Forwarder가 설치되어 있습니다. 버전 8을 지원하는 HP OS Forwarder를 구할 수 없습니다. 방법을 알고 있습니까? ... View more

is converted to,2013-03-1 strftime (_time, "%Y-%m-%W"). However, the and strptime (strftime (_time, "%Y-%m-%W"), "%Y-%m-%W"), not converted. I want to know how to solve. ... View more

I search characters in the format you want to convert. Characters in the form of six-digit "0" "000000" and want to convert to. ex) Source: "1", convert: "000001" Source: "2", convert: "000002" Many ways tried to think, but can not get the results. Please help me. ... View more

Character display problem in question. Splunk, MySQL, CentOS installed @ MySQL My.cnf @ [mysql] default-character-set = utf8 [mysqld] character-set-client-handshake = FALSE init_connect = "SET collation_connection = utf8_general_ci" init_connect = "SET NAMES utf8" default-character-set = utf8 character-set-server = utf8 collation-server = utf8_general_ci [client] default-character-set = utf8 [mysqldump] default-character-set = utf8 @ Table Script @ CREATE TABLE test_table (    code char (50) NOT NULL COMMENT 'CODE',    name char (50) NOT NULL COMMENT 'NAME'   PRIMARY KEY ( code ) ) ENGINE = InnoDB DEFAULT CHARSET = utf8; @ Table Value @ code name 001 테스트 The value of the name field is "Korean". @ Search Result @ | Mysqlquery spec = splunk_test query = "SELECT * FROM test_table;" code name "001" "???" Are displayed as question marks. Do you know how to solve the problem? ... View more

The question again. (The question before, but did not respond.) I would like to know how to change the time to run the Splunk search inquiries. About 1 hour learned through testing. To ask why. If you were to generate real-time through DashBoard An hour later, the problem occurs. Search did not run. (there is no change of the Data) Reflash must screen every hour. ... View more

File monitoring questions Monitoring Point is, the log file The peculiar form of the log file to the log record. Log format 000000 SIZE = 099999 LOOP = 000000 WDTH = 001536 NWNO = 0004 00001 | AIX | 6.1 | LCID | xxx 00002 | AIX | 6.1 | LCID | xxx 00003 | AIX | 6.1 | LCID | xxx 00004 | AIX | 6.1 | LCID | xxx Log record while NWNO item changes occur in the above log. To collect duplicate indexing problems occur. For example, the search results index = temp 00001 00001 | AIX | 6.1 | LCID | xxx 00001 | AIX | 6.1 | LCID | xxx 00001 | AIX | 6.1 | LCID | xxx 00001 | AIX | 6.1 | LCID | xxx Is indexing event Could there be a way to solve the problem? ... View more

AIX Universal Forwarder Setting the server was installed. ". / splunk edit licenser-loalslave-master_uri 'https://xxx.xxx.xxx.xxx:8089'" and "#. / splunk edit user admin-password 'xxx'" Get the following error after entering. Splunk is not running, and it must be for this operation. To start splunk, run "splunk start" / (02) (". / splunk start" and ". / splunk status" to check.) ... View more

Defined as the value of the field of the field name is possible? ex) A_Field item is values "B_Field"    conversion : B_Field = * I'm looking into "command.conf" how using i will not know. So the question is. ... View more