cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Ask a Question
marvatwork
Explorer
Member since: ‎10-01-2013
‎08-16-2022
Community Statistics
Posts 4
Solutions 0
Karma Given 0
Karma Received 1
Member Since ‎10-01-2013
Activity Feed
View All

Is there a way to turn off internal splunk log rot...

by in Getting Data In
‎03-30-2015 06:55 AM
1 Karma
‎03-30-2015 06:55 AM
1 Karma
I need to keep the data in $SPLUNK_HOME/var/log/splunk. I've tried to increase the max file size and increase the number of logs; however, this has shown to be inadequate. Is there a way that I can just turn off the rotation? If not, can I archive the old logs instead of having them rotate off? ... View more

How can I find out which systems are generating th...

by in All Apps and Add-ons
‎11-05-2014 01:04 PM
‎11-05-2014 01:04 PM
About a week ago, daily usage jumped SIGNIFICANTLY. I was no where near the license capacity, now i'm exceeding it and I'm not sure what is generating it. What can I do to find out what is generating most of the output. ... View more

Re: Indexing question on a heavy forwarder

by in Getting Data In
‎10-09-2013 02:30 PM
‎10-09-2013 02:30 PM
That seems to work. My next question, is do I get hit twice for the data coming from the development site. For indexing it twice? ... View more

Indexing question on a heavy forwarder

by in Getting Data In
‎10-09-2013 01:38 PM
‎10-09-2013 01:38 PM
I have a main indexer in one location (production) that gets inputs from all the systems located in that production location. I have a heavy-forwarder at another location (development) that gets inputs from all the systems at this second location. If I want to keep a local copy of the index at the developement site before forwarding it to the main indexer, do I need another license? ... View more
Contact Me
Online Status
Offline
Date Last Visited
‎08-16-2022 01:56 PM
Karma from
View All