Hi, We have Splunk DB Connect V2.4.1 is running on Splunk enterprise 7.1.6. Now we are planning to upgrade the Splunk enterprise to 7.3.  Is Splunk DB connect V2.4.1 compatible with Splunk Enterprise 7.3? ... View more

Hello All, I'm monitoring forwarder status from SH using _internal call and getting proper response from Universal forwarders 6.3.3 but not getting any response from UF 6.4.3, command is getting hanged. Command used: ./splunk _internal call /services/server/status/partitions-space -method GET -uri https://serverName:8089 -auth admin:changeme SH version: 6.2 Please provide the solution. ... View more

Hi ALL, I have usecase where i need to display the mis match values between different data source in dashboard. Use Case: Consider i have 3 database data sources DS1, DS2 and DS3. 1. DS1 data will index daily at 1 AM. Take the unique Id's say Ds1_ID from this index 2. In DS2 database, I have to ingest only those events whose Ds2_Id matches with Ds1_ID. 3. In Ds3 database, i have to ingest only those events whose DS3_ID matches with Ds1_ID. 4. Using Step 2 and step 3 indexed data, i have to create the mismatch report. Please suggest the methods to solve this use case. ... View more

Hi, i'm using below command to get the status of the forwarder 6.3 version and it is working fine. But same command is not working for forwarder 6.4. Let me know is there any change in end points. SH version : 6.2 Command: ./splunk _internal call /services/server/status/partitions-space -method GET -uri https://remoteHost:8089 -auth admin:changeme And there is no network issues between SH and forwarder. Please provide the solution soon. ... View more

Hi, i have installed Website Monitoring app. Since i don't have proxy server so i left the configuration for proxy server as blank during setup and created input for one of the services but not getting required response from the web service. Getting the response as below. timed_out=False response_code= url=http://xyz title="web " request_time= total_time= What should be the path of the certificate and its key? Where we have to place the request.xml so that web services recognize the request format and send the response in required format? kindly provide solution to the above problem and let me know if i'm missing any steps. ... View more

Implemented chart overlay and trying in-page drilldown based on field condition. I want to set queries for token based on field. For example: <drilldown> <condition field="host"> <set token="query">index=_internal | table host</set> </condition> <condition field="sourcetype"> <set token="query">index=_internal | table sourcetype</set> </condition> Currently implemented like above code, but on click of the chart, it's going to the search bar instead of the expected drilldown. Kindly let me know Is there any other way to implement an in-page drilldown for a chart overlay? ... View more

Hi All, I’m using Monitoring of JVM with JMX app to monitor JVM’s. I installed app on my laptop and using default config.xml. Getting this exception "Failed to retrieve RMIServer stub: javax.naming.ServiceUnavailableException [Root exception is java.rmi.ConnectException: Connection refused to host: localhost; nested exception is: java.net.ConnectException: Connection refused: connect]". please share the solution. Jre 1.8 is installed on laptop. ... View more

Installed splunk 6.2 and have a accelerated datamodel. I tried the below query and getting "no results found". |tstats count from datamodel=test prestats=t i'm getting the result without prestats command. so please anyone tell me that when to use prestats command and its uses. ... View more