About cmutt78

cmutt78 · ‎01-04-2017

I got it to work but took a little digging. My command was: msiexec.exe /i splunk-6.5.1-f74036626f0c-x64-release.msi AGREETOLICENSE=Yes DEPLOYMENT_SERVER="server:8089" LAUNCHSPLUNK=0 INSTALL_SHORTCUT=0 INSTALLDIR="D:\Program Files\Splunk" When the install completed, Splunk was not started but as you mention there was a splunk.secret that encrypted a single entry for sslPassword in the server.conf. I sync'd that entry with the system where my splunk.secret came from and I now have it working. Hope this helps.

cmutt78 · ‎03-29-2016

This issue can occur when you have an excessive amount of pings configured since the pings occur synchronously. This can be identified by running: sourcetype=web_availability_modular_input "Previous run was too far in the past" This shows that based on the interval defined in the inputs.conf, runs were missed and the application is now compensating for the miss by updating its last run time and executing the ping. To resolve the issue, either spread the load over a number of servers to meet your interval time or use a different method for pinging data. Enjoy!

cmutt78 · ‎11-09-2015

I have a custom application that does incremental loads from an external resource. I maintain a file with the latest timestamps so that each run I can read the file and pull the new data. My struggle is with how do I perform application upgrades without rolling these files back to their initial value. Is there a configuration that can be set to ignore file types or directories during a custom application upgrade? Please advise.

cmutt78 · ‎09-10-2015

done, thank you

cmutt78 · ‎09-04-2015

I am trying to get Google Apps for Splunk functioning, but am a bit confused with the authentication method. The instructions in the app don't seem to mesh with Google API credentials. When I generate my credentials I get the following structure: { "private_key_id": "", "private_key": "-----BEGIN PRIVATE KEY-----", "client_email": "", "client_id": "", "type": "" } ...while the app asks for clientid and secret key. What am I missing? Please advise.

cmutt78 · ‎07-21-2015

What I decided to do was to bypass the Metrics and pull the raw data from the s3 bucket. Figured that the metrics would be easy enough to replicate.

cmutt78 · ‎07-20-2015

I see the below in several different variations with #'s of metrics and failures 2015-07-21 02:21:01,671 INFO pid=10489 tid=QueryWorkerThread-2 file=aws_cloudwatch.py:_main_work_loop:582 | Queried 2 metrics with 2 failures totaling 0 statistics in 0.439s before stalling.

cmutt78 · ‎07-20-2015

I am attempting to setup a CloudFront data input using the Splunk app for AWS. My steps thus far: - Create/Use a distribution accessible through the AWS console - Turn on logging for the distribution and assign to an s3 bucket - Create the data input input in splunk AWS account: <selected mine> AWS region: us-east-1 Metric namespace: AWS/CloudFront Metric Names: ["Requests","BytesDownloaded","BytesUploaded","TotalErrorRate","4xxErrorRate","5xxErrorRate"] Dimension Names: [{"DistributionId":"E1GGN2SAMEXDYG", "Region":"Global"}] Metric stats: ["Average", "Sum", "SampleCount", "Maximum", "Minimum"] Granularity: 60 (I've tried 3600 as well) Polling: 60 (I've tried 3600 as well) Based on everything I have seen, this should work but can't find one good example that shows successful capture of the CloudFront data. Please advise.

Posts	8
Solutions	1
Karma Given	32
Karma Received	4
Member Since	‎02-28-2013

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

During custom application upgrades, is there a con...

Google Apps for Splunk and OAuth2: How to set up p...

Splunk and AWS CloudFront data

Re: How to distribute splunk.secret to Windows Hea...

Re: Polling frequency seems to default to 10m

During custom application upgrades, is there a con...

Re: Google Apps for Splunk and OAuth2: How to set ...

Google Apps for Splunk and OAuth2: How to set up p...

Re: Splunk and AWS CloudFront data

Re: Splunk and AWS CloudFront data

Splunk and AWS CloudFront data