Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About sbochniewicz
sbochniewicz
Path Finder
Member since:
02-09-2015
06-05-2020
Community Statistics
| Posts | 21 |
| Solutions | 3 |
| Karma Given | 0 |
| Karma Received | 4 |
| Member Since | 02-09-2015 |
Activity Feed
- Got Karma for Re: How can we index real-time data directly from an Oracle database into splunk?. 06-05-2020 12:47 AM
- Got Karma for Re: How can we index real-time data directly from an Oracle database into splunk?. 06-05-2020 12:47 AM
- Got Karma for Re: not sendemail if "Results not found". 06-05-2020 12:47 AM
- Got Karma for Re: Splunk Add-on for Zenoss: Why am I getting error "Could not find all specified lookup fields in the lookup table..."?. 06-05-2020 12:47 AM
- Posted Re: Search peer + limit indexes on Deployment Architecture. 03-25-2016 01:01 PM
- Posted Re: ITSI upgrade missing Threshold Templates on Splunk IT Service Intelligence. 01-15-2016 01:41 PM
- Posted ITSI upgrade missing Threshold Templates on Splunk IT Service Intelligence. 01-15-2016 01:29 PM
- Tagged ITSI upgrade missing Threshold Templates on Splunk IT Service Intelligence. 01-15-2016 01:29 PM
- Tagged ITSI upgrade missing Threshold Templates on Splunk IT Service Intelligence. 01-15-2016 01:29 PM
- Posted Re: not sendemail if "Results not found" on Splunk Search. 11-10-2015 07:30 AM
- Posted Re: Why is Splunk Add-on for McAfee ePO data not indexing, but SQL query works in Splunk DB Connect 2? on All Apps and Add-ons. 07-31-2015 08:56 AM
- Posted Re: Why is Splunk Add-on for McAfee ePO data not indexing, but SQL query works in Splunk DB Connect 2? on All Apps and Add-ons. 07-31-2015 07:36 AM
- Posted Re: Splunk Add-on for Zenoss: Why am I getting error "Could not find all specified lookup fields in the lookup table..."? on All Apps and Add-ons. 07-27-2015 08:49 AM
- Posted Splunk Add-on for Zenoss: Why am I getting error "Could not find all specified lookup fields in the lookup table..."? on All Apps and Add-ons. 07-27-2015 08:45 AM
- Tagged Splunk Add-on for Zenoss: Why am I getting error "Could not find all specified lookup fields in the lookup table..."? on All Apps and Add-ons. 07-27-2015 08:45 AM
- Tagged Splunk Add-on for Zenoss: Why am I getting error "Could not find all specified lookup fields in the lookup table..."? on All Apps and Add-ons. 07-27-2015 08:45 AM
- Tagged Splunk Add-on for Zenoss: Why am I getting error "Could not find all specified lookup fields in the lookup table..."? on All Apps and Add-ons. 07-27-2015 08:45 AM
- Posted Re: ldapfilter is giving me ERROR Missing required value for server in ldap/mydomain but ldapsearch works on All Apps and Add-ons. 07-08-2015 01:51 PM
- Posted Re: After upgrading to Splunk Support for Active Directory 2.0, why am I getting "invalid" DN (err=34) when I try connecting to my Oracle DSEE7 LDAP Instance? on All Apps and Add-ons. 07-08-2015 01:22 PM
- Posted Re: Can the DB Connect Database Lookups use an RPC pool as well? on All Apps and Add-ons. 05-12-2015 03:49 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 |
03-25-2016
01:01 PM
If you know which indexers have the data you want to search
(splunk_server=IndexerA AND index=indexA) OR (splunk_server=indexerB AND index=B)
... View more
01-15-2016
01:41 PM
Restarted Splunk and it appears to be working now.
... View more
01-15-2016
01:29 PM
Under Threshold templates I only have "Custom" and nothing else. This was an upgrade from 1.2.0 but the ITOA kvstore was clear prior due to upgrade issues.
... View more
11-10-2015
07:30 AM
1 Karma
Dirty way to do it, but effective!
Also a good way to email users who do bad things...
| eval to=case(_raw!="","whoz-at-who.com") | sendemail to=$result.to$
... View more
07-31-2015
08:56 AM
I removed the TOP 10000 from the Query and it started working.
... View more
07-31-2015
07:36 AM
I am having the same problem it looks like it worked once, imported 10,000 row, the wrong direction then stopped. Even though the logs make it seem to be running every minute.
... View more
07-27-2015
08:49 AM
1 Karma
may have found the issue TA Snow and TA Zenoss both have severity.csv, changed zenoss to zenoss-severity.csv
... View more
07-27-2015
08:45 AM
Why am I getting the following error?
Error 'Could not find all of the specified lookup fields in the lookup table.' for conf 'zenoss-events' and lookup table 'zenoss-severity-cim'.
... View more
07-08-2015
01:51 PM
I am having the same issue ldapfilter does not honor the domain="xyz" always uses the default.
... View more
07-08-2015
01:22 PM
Dear splunk,
Can you please update the ldap3 library used by this app as it will allow the proper basedn that was a bug in the previous version.
Recommend using this git repo as it is currently being maintained.
https://github.com/cannatag/ldap3
... View more
05-12-2015
03:49 PM
Depending on how efficient the rpc protocol is, how is this much different than passing work off to the indexers or using external lookups.
... View more
04-29-2015
05:08 AM
Yes it has.
... View more
04-10-2015
01:11 PM
Aww ten more days to fix a bug Blech where is my instant gratification
... View more
04-10-2015
05:19 AM
I know it is hard to say but when is this update expected?
... View more
04-03-2015
11:01 AM
2 Karma
The quick answer is https://splunkbase.splunk.com/app/2686/
This database connection app will let you import, export and lookup oracle data.
The important part is ensuring that the data your are importing has an incremental number or date that can be used to collect only new data.
db-tail is the input feature you are looking for.
... View more
04-03-2015
10:42 AM
@hartfomi I hope this answers your question
http://answers.splunk.com/answers/130801/put-multiple-forms-on-a-single-dashboard.html
... View more
04-03-2015
10:31 AM
Here is a sample based on one of my dashboard forms. I hope this helps. Basically you just use the value of the input token as a variable in the second populating search.
<fieldset submitButton="true">
<input type="dropdown" token="rmonth1">
<label>Recent Report Month</label>
<populatingSearch fieldForValue="report_month" fieldForLabel="report_month">
<![CDATA[| savedsearch "AWS Bill - Monthly Latest Snapshot" | stats count by report_month]]>
</populatingSearch>
</input>
<input type="dropdown" token="rmonth2">
<label>Previous Comparison Report Month</label>
<populatingSearch fieldForValue="report_month" fieldForLabel="report_month">
<![CDATA[| savedsearch "AWS Bill - Monthly Latest Snapshot" | where report_month<"$rmonth1$" | stats count by report_month]]>
</populatingSearch>
</input>
</fieldset>
... View more
04-03-2015
10:05 AM
229517 - Just added today a new diag with the crash report, as I got it to provide a crash around the function that is having the issue with parsing.
If needed I can talk to a developer about it, I pulled out the JSON and final formatted XML stream to verify that the issue was with the Execprocessor XML stream.
... View more
04-03-2015
10:01 AM
This addon does not come with a GUI however there are savedsearches, workflows, and pre built Panels.
It should be really easy to reuse the data with the included searches and panels.
... View more
04-03-2015
09:56 AM
With the new version 2.0 I saw the documentation for Outputs and Inputs using the RPC pool to offload the request, can the same be done for the lookups?
This would reduce the need for open database connections from the search head.
... View more
04-02-2015
09:05 AM
I figured out our problem.
Now I need to figure out how to fix it.
It looks like the xml event stream parser doesn't like "New lines" I found that the case of a few of my issues more than the "Description" field had this. Additionally my problem is once the event parser barfs it never again wants to pickup that stream until the snow.py modular input is restarted.
Anyone know best way to troubleshoot the event parser killing a stream?
... View more
