I extracted some values into a field using the field extractor and now I need to convert it into a number to use sum() and avg(). It seems that this field's values is being recognized by Splunk as a string. I saw on the online docs the convert() function, but, not sure how to use it. Could you help? Thanks a lot. ... View more

Anyone of you expert guys have seen this error message before? I've got this after trying to insert a trial license. Machine's date is OK, not sure about timezone configuration, Splunk's timezone is OK too...and, any clue? Any hint? Any Help? Thank you... Message: failed to add because: license is from the future; its active span has not begun yet ... View more

Hi Folks, Implementing this morning the Splunk App for Juniper Firewalls, I managed that to work simply configuring on Juniper web interface the destination IP, traffic log and configuring Splunk to collect all the logs at the 514 port. OK, it was very easy to do and now I am very happy with that. However, when I accessed the top menu "Remote Access >> VPN Summary", "my surprise part 1", the page was not showing anything. So, open the the "vpn_summary" view with Splunk's XML editor, "my surprise part two", the code don't have any dashboard definition. Anyone here has had this experience? Any hint on that? Anyone has developed a VPN dashboard from the scratch using the juniper firewall data? I am looking forward to hearing from you guys, thanks a lot! ... View more

Hi Guys, I'm intending to develop a dashboard that shows what IP addresses have accessed the website every 15 minutes. It's OK, I am planning to use "| timechart span=15m" to solve this question. But, I must start monitoring this scenario from 00:22 AM. Is there a way to start from 00:22 AM and increment every 15 minutes from that time? For example: 2013-08-09 00:22 ... 2013-08-09 00:37 ... 2013-08-09 00:52 ... [...] Any hint? Thank you guys! ... View more

Hi Folks, After to review all the AD App for Splunk set up using Splunk Blogs (http://blogs.splunk.com/2012/10/21/splunk-app-for-active-directory-and-the-top-10-issues/) and AD online manual (http://docs.splunk.com/Documentation/ActiveDirectory/latest/DeployAD/AbouttheSplunkAppforActiveDirectory), I am still facing problems related with the scheduled searches to feed CSV files used by AD App - I am still seeing an up message "No Matching Fields". After to fill up manually CSV files with some example data, that up message stop appearing and now the data I putted into the files is appearing as a Domain, Forest, Site and Servers. Having that in mind I ask you: files are not being written by the AD's App, what is happening with the set up? Any clue, pls? Thanks a lot, cheers! ... View more