About tlanghals_il

tlanghals_il · ‎01-06-2022

Same issue for ALB access log collection using the SQS based S3 input after upgrading to 5.2.1. Not only is this not indexing the S3 logs, but it's also deleting the SQS messages so it's not appropriately handling the error.

tlanghals_il · ‎10-23-2015

I'm seeing the exact same issue with IIS logs. Removing eventtype=web-uri-nonpage from the pageview definition returns logs, where as with it in returns no results.

tlanghals_il · ‎09-08-2015

We're trying to use DB Connect 2 with a query that's using SELECT MAX(column) to pull a single value every 5 minutes. The input setup is able to return a value without issue and the Health dashboard is showing the transactions are running according to schedule successfully, but no data is being populated in the index. I also looked at the _internal index and log files for dbx errors, but there are only normal informational/debug messages.

Posts	3
Solutions	0
Karma Given	1
Karma Received	0
Member Since	‎03-21-2014

Online Status	Offline
Date Last Visited	‎01-06-2022 02:14 PM

Splunk DB Connect 2 Health dashboard shows transac...

Re: AWS CloudTrail SQS Based S3 error

Re: After updating the Splunk App for Web Analytic...

Splunk DB Connect 2 Health dashboard shows transac...