About splunkben

splunkben · ‎01-10-2018

I've seen that already. That is only for 32bit arm linux. I am looking for 64bit arm linux (aarch64) splunk universal forwarder. The splunk UF download page only has 32bit for arm. Also I am interested in monitoring log files with splunk UF - not just packet captures via a tap or HEC postings of events.

splunkben · ‎01-09-2018

It looks like splunk has a armv6 (32 bit) UF available for download. I'd love to see armv8 for linux as well.

splunkben · ‎01-09-2018

As you noted - there is 32bit splunk UF available for linux - but that doesn't work on armv8 linux.

splunkben · ‎01-09-2018

There is a linux splunk UF for armv6 (32 bit) available on the splunk downloads page, but nothing yet for armv8 (64 bit) linux. Any idea when that might be available?

splunkben · ‎05-03-2016

One of our Linux hosts running a Splunk 6.x forwarder is getting an excessive number of messages in splunkd.log: 04-28-2016 21:39:18.560 -0400 WARN TimeoutHeap - Detected system time adjusted backwards by 4ms. 04-28-2016 21:39:28.576 -0400 WARN TimeoutHeap - Detected system time adjusted backwards by 3ms. 04-28-2016 21:39:35.581 -0400 WARN TimeoutHeap - Detected system time adjusted backwards by 4ms. 04-28-2016 21:39:39.581 -0400 WARN TimeoutHeap - Detected system time adjusted backwards by 4ms. 04-28-2016 21:39:40.581 -0400 WARN TimeoutHeap - Detected system time adjusted backwards by 4ms. 04-28-2016 21:39:51.617 -0400 WARN TimeoutHeap - Detected system time adjusted backwards by 4ms. 04-28-2016 21:40:30.655 -0400 WARN TimeoutHeap - Detected system time adjusted backwards by 4ms. 04-28-2016 21:40:33.655 -0400 WARN TimeoutHeap - Detected system time adjusted backwards by 4ms. 04-28-2016 21:40:41.691 -0400 WARN TimeoutHeap - Detected system time adjusted backwards by 4ms. ntp does appear to be running and the clock time looks ok when spot checking. Was wondering what that Splunk forwarder warning means? Does it thinks the system clock time is changing/bouncing around a lot and/or going backwards?

splunkben · ‎12-08-2014

Is there a way to configure the hydra framework (used along with the splunk netapp app) so that specific data collector nodes take the jobs assigned to specific netapp filers? For example - we have filers F1, F2, F3, … , F10. We have two dedicated netapp data collector nodes DCN1, DCN2. We want to have DCN1 handle the api connections to the netapps F1 - F7. And the DCN2 handle all api filer query connections to to netapps F8 - F10.

splunkben · ‎10-22-2013

Got this working. Added in validationDisabled = true

splunkben · ‎10-21-2013

I'm having trouble getting splunk dbx app connected to a vertica database. Other db's (netezza, composite, mysql, oracle) working fine. Here's the config I am using in local/database_types.conf [vertica] displayName = Vertical jdbcDriverClass = com.vertica.Driver defaultPort = 5433 connectionUrlFormat = jdbc:vertica://{0}:{1}/{2} Note sure for veritca - what to use for the testQuery but I only need read only access to the vertica DB etc/apps/dbx/bin/lib/vertica_jdbc_driver.jar in place and world readable. java bridge server restarted. verified the user/pass is good and can connect ok to the vertica database outside of spunk. splunk 5.0.5 with dbx app version 1.1.0 on a single standalone splunk server. In dbx.log seeing messages like: 2013-10-16 17:30:46.743 dbx1106:ERROR:DatabaseInfoCommand - Error while executing command: Error getting database connection: Could not create a validated object, cause: ValidateObject failed

splunkben · ‎10-21-2013

Did you ever get this working? I'm trying use splunk db connect app to connect to a vertica DB as well but running into errors. Working fine for other db's like netezza, PDS, oracle, mysql, etc. Just wondering what you used in database_types.conf - specifcally did you put anyting for the testQuery line? I"ve got the vertica_jdbc_driver.jar in place in dbx/bin/lib but keep getting errors when trying to connect. Thanks.

Posts	9
Solutions	1
Karma Given	3
Karma Received	2
Member Since	‎10-21-2013

Online Status	Offline
Date Last Visited	‎08-09-2022 09:06 AM

Why is one of our Linux Splunk 6.x forwarders repo...

How to specify which data collector nodes handle j...

db connect to Vertica DB error

Re: Splunk Arm64 download

Re: splunk on ARM platform

Re: Splunk Arm64 download

Re: Splunk Arm64 download

Why is one of our Linux Splunk 6.x forwarders repo...

How to specify which data collector nodes handle j...

Re: db connect to Vertica DB error

db connect to Vertica DB error

Re: Can I use DB Connect to interact with Vertica?