About giorgio_adami_m

giorgio_adami_m · ‎05-11-2016

Take a look! https://answers.splunk.com/answers/396835/splunk-add-on-for-microsoft-azure-azurewebsitediag.html

giorgio_adami_m · ‎01-14-2016

The official Red Hat link is https://access.redhat.com/solutions/46111 (jwelsh you forgot a "1" in your link)

giorgio_adami_m · ‎09-18-2015

Thank you grijhwani, I have googled before ask here the question. I was looking for someone that has already experienced this issue and, maybe, found a workaround...

giorgio_adami_m · ‎09-18-2015

Using the Splunk Mobile App (for Android), when I try to share a report via Gmail (send it as attachment), in Gmail I have the following message: "Permission denied for the attachment". Maybe it is a Gmail issue, but any suggestion to solve the problem is much appreciated.

giorgio_adami_m · ‎05-18-2015

I am damn sure. The problem is the name "host". If I try to give another name to my field, the EXTRACT works, but I need to override "host".

giorgio_adami_m · ‎05-18-2015

I want to override the Host value at search time, not at index time because I need to override it just in the context of a specific app. EXTRACT-field = (?P<host>my_regex) It does not work. Why? Is there another way to do this?

giorgio_adami_m · ‎03-09-2013

Yes, you can set the value of the _time field before the collect. Example: ... | addinfo | eval _time=info_max_time | collect ... you can use any eval function to calculate the _time value.

giorgio_adami_m · ‎03-07-2013

You can find good examples in this app: http://splunk-base.splunk.com/apps/22333/splunk-ui-examples-app-for-41

giorgio_adami_m · ‎03-07-2013

mark it as answered 😉

giorgio_adami_m · ‎03-07-2013

http://splunk-base.splunk.com/answers/2559/what-is-the-other-field

giorgio_adami_m · ‎03-07-2013

I think that "transaction" is the command you're looking for: http://docs.splunk.com/Documentation/Splunk/5.0.2/SearchReference/Transaction For example: search your events | transaction job_field | timechart duration

giorgio_adami_m · ‎03-07-2013

Maybe the problem is an incorrect configuration of the email alert (alert_actions.conf). Do you receive emails from splunk (without pdf) ? If the answer is "no", these two links are for you: http://splunk-base.splunk.com/answers/58253/problem-with-sending-email http://docs.splunk.com/Documentation/Splunk/5.0.2/Admin/Alertactionsconf

giorgio_adami_m · ‎03-05-2013

So, post any related ERROR line that you have in python.log .

giorgio_adami_m · ‎03-05-2013

I receive regularly pdf in alert mails and there is this line in my python.log , so your problem is somewhere else. Look for ERROR lines in python.log. P.S. Are you using the integrated PDF generator of Splunk 5 ?

giorgio_adami_m · ‎03-05-2013

It seems that it's not possible to edit the query LDAP that splunk-admon launch to the target DC. I've solved filtering events with props/transforms before forward/index them.

giorgio_adami_m · ‎11-26-2012

Hi all! I need to import users informations from AD. The forest has a folder for each Country, and each country has the "users" folder (Ex: OU=users, OU=Country1, OU=intranet and OU=users, OU=Country2, OU=intranet). I've tried to edit %SPLUNK_HOME%\bin\scripts\splunk-admon.path in this way: $SPLUNK_HOME\bin\splunk-admon.exe -query "(&(sAMAccountType=805306368))" It runs without errors, but i lose the format of the sourcetype "ActiveDirectory". Any suggestion? Thanks

Posts	16
Solutions	3
Karma Given	25
Karma Received	7
Member Since	‎09-27-2012

Online Status	Offline
Date Last Visited	‎06-05-2020 02:03 AM

Why am I getting "Permission denied for attachment...

Host override at search time

Active Directory: monitor only users data

Re: Splunk Add-on for Microsoft Azure: Is there a ...

Re: How do I disable Transparent Huge Pages (THP) ...

Re: Why am I getting "Permission denied for attach...

Why am I getting "Permission denied for attachment...

Re: Host override at search time

Host override at search time

Re: Is it possible to rewrite the _time value for ...

Re: Customize report for view with form

Re: Splunk indexer displays events from my new for...

Re: Problem with the number of column in a row

Re: Event Timechart with event duration

Re: Failure in including PDF in alert mail

Re: Failure in including PDF in alert mail

Re: Failure in including PDF in alert mail

Re: Active Directory: monitor only users data

Active Directory: monitor only users data