Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About ljolly
ljolly
Explorer
Member since:
10-16-2013
07-10-2023
Community Statistics
| Posts | 8 |
| Solutions | 1 |
| Karma Given | 1 |
| Karma Received | 0 |
| Member Since | 10-16-2013 |
Activity Feed
- Karma Re: Splunk forwarder container 9.0.5 not initializing and hanging on "splunk status" command for NevTheRev. 07-09-2023 05:01 PM
- Posted Re: Splunk Cloud Gateways: How to configure mobile gateway on All Apps and Add-ons. 07-16-2019 11:01 PM
- Posted Re: Splunk Cloud Gateways: How to configure mobile gateway on All Apps and Add-ons. 07-16-2019 12:11 AM
- Posted Re: Splunk Cloud Gateways: How to configure mobile gateway on All Apps and Add-ons. 07-15-2019 11:04 PM
- Posted Re: Is there a way to use structured field extraction (PSV in this case) that works with multiline field values? on Splunk Search. 01-14-2016 01:15 AM
- Posted Re: Is there a way to use structured field extraction (PSV in this case) that works with multiline field values? on Splunk Search. 01-12-2016 08:38 PM
- Posted Is there a way to use structured field extraction (PSV in this case) that works with multiline field values? on Splunk Search. 01-12-2016 12:08 AM
- Tagged Is there a way to use structured field extraction (PSV in this case) that works with multiline field values? on Splunk Search. 01-12-2016 12:08 AM
- Tagged Is there a way to use structured field extraction (PSV in this case) that works with multiline field values? on Splunk Search. 01-12-2016 12:08 AM
- Tagged Is there a way to use structured field extraction (PSV in this case) that works with multiline field values? on Splunk Search. 01-12-2016 12:08 AM
- Tagged Is there a way to use structured field extraction (PSV in this case) that works with multiline field values? on Splunk Search. 01-12-2016 12:08 AM
- Posted Re: error when i add server on the add-on for f5 on All Apps and Add-ons. 08-20-2015 06:03 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 |
07-16-2019
11:01 PM
A brand new test environment is up and running and the gateway application is now working as expected.
So, for me it appears to have been a problem with something in RHEL 6.10 or something we did to it. I do not recall seeing a requirement for RHEL 7 in the documentation just that “linux” was supported. I would not be entirely surprised if I have managed to miss this though.
Anyway, all good now, except I will have to upgrade the production SHCluster nodes to RHEL 7 as well... which really had to be done anway... i have just been putting it off!
... View more
07-16-2019
12:11 AM
Thanks for your reply. 🙂
Unfortunately I am told by our network team that I cannot set a proxy in that manner as the proxy is basically the default gateway... dah.
Oh well, I will try reinstalling in incognito mode and see if that helps.
... View more
07-15-2019
11:04 PM
I am having a very similar (if not the same) issue and was wondering if you could shed some light on what was wrong with your https proxy configuration?
Any help would be greatly appreciated! 🙂
... View more
01-14-2016
01:15 AM
I managed to answer my own question, which is nice. 🙂
props.conf
[psv-iis]
SHOULD_LINEMERGE = true
NO_BINARY_CHECK = true
category = Custom
disabled = false
REPORT-extractpsv = extractpsv-iis
pulldown_type = true
transforms.conf
[extractpsv-iis]
DELIMS = "|"
FIELDS = Timestamp , Environment , ClientIP , CorrelationId , ApplicationName , ApplicationVersion , ThreadId , Level , Message
Regards,
Luke
... View more
01-12-2016
08:38 PM
I managed to answer my own question, which is nice. 🙂
props.conf
[psv-iis]
SHOULD_LINEMERGE = true
NO_BINARY_CHECK = true
category = Custom
disabled = false
REPORT-extractpsv = extractpsv-iis
pulldown_type = true
transforms.conf
[extractpsv-iis]
DELIMS = "|"
FIELDS = Timestamp , Environment , ClientIP , CorrelationId , ApplicationName , ApplicationVersion , ThreadId , Level , Message
Regards,
Luke
... View more
01-12-2016
12:08 AM
Hi There,
I have been trying with no luck today to do a structured field extraction using the "Add Data" function of my test environment:
Splunk Version 6.3.1
RHEL
The data looks something like this:
2016-01-11 08:22:11.048 +10:00|SDLC||someuniquedata|Appname|ver|11|Information| Single line message
2016-01-11 08:22:12.249 +10:00|SDLC||someuniquedata|Appname|ver|11|Warning| multi-line message part 1
multi-line message part 2
multi-line message part 3
2016-01-11 08:22:26.227 +10:00|SDLC||someuniquedata|Appname|ver|48|Information| Single line message
But when I configure the parameters to do a PSV field extraction, the multiline message part 2 and 3 lines are created as separate events. At this point, since I have used many combinations of SHOULD_LINEMERGE ( and dependent config options such as BREAK_ONLY_* ) and LINE_BREAK to no avail, I am left with the sinking feeling that this is just the way this type of structured data is handled...
Is there something else (perhaps outside of the gui) that I could try?
Regards,
Luke
... View more
08-20-2015
06:03 PM
Hi There,
I am having the same problem here.
Fresh install of the app. v2.2.0.
Splunk version 6.2.0
Splunk on RH
Browser is Chrome
Error occurs when attempting to create server.
i.e. the add server form has been completed and when you click create:
500 Internal Server Error:TypeError: unsupported operand type(s) for +: 'NoneType' and 'str'
... View more
