The ./splunk show cluster-bundle-status command really does give you the granularity that the gui console does if you are trying to get to that end state. ... View more

I have found that my customers like - ./splunk show cluster-bundle-status ... View more

I get the same thing on ubuntu ... View more

Anyone able to confirm that this works? I have had trouble getting it to work ... View more

Try this.. http://dev.splunk.com/view/webframework-developapps/SP-CAAAEP9 ... View more

It is NOT CIM compliant, so the answer would be no 😞 How would you want it to integrate to ES? ... View more

Check this out: http://docs.splunk.com/Documentation/AddOns/released/MSHyperV/Distributeddeployment You really don't need it unless you are using a light forwarder. I would suggest removing this from your indexers. HTH ... View more

Very helpful answer! ... View more

データファイルを送ってもらいますか？テストのために必要。。。 ... View more

The contact not being there means perhaps you are logging in when you use SOAP? It seems that you are trying to pass over a contact that ARSystem is not recognizing and therefore spitting out an error. Some steps I would suggest: 1. Have you checked that the contact ID you provided in your request is unique in the SHR:People form ? 2. Turn on SQL and API logging and port them to the same file - on the remedy side. Once you have done this you should get a bit more of an error description. Let me know and we can go from there.. ... View more

Glad you are asking the question before just upping it. There are a couple of considerations/thoughts(I am sure there are more) that would need to be thought out. 1. If you were to do this you may end up hurting your performance as you may cause memory ballooning at some point. The limit is there to protect against run away memory consumption. 2. Is it possible to eliminate the join/subsearch that may be causing this? -- This is an assumption that one of these maybe causing your issue but worth asking 🙂 As you suggest this change is a global one and should be mindful of such a change. If it were me, I would start with investigating the possibility of reconstructing the search so as to remove the join/subsearch function if that is indeed what is in the search. HTH! ... View more

Anyone else have an issue with the deployment server not being set after the deployment on the forwarder? ... View more

Chrome on Windows 10 works ok? ... View more

This might get you most of the way there, depends though on if you are comfortable with passwords being stored in a flat file ...otherwise I'm thinking Python... https://coderwall.com/p/dsfmwa/securely-use-basic-auth-with-curl HTH ... View more

Have you tried confirming that the environment is using the correct python? It sounds like it might be attempting to use the wrong version of python by chance.. This is a pretty typical error when there is a version mismatch ... View more

Yes I have confirmed it works, what exactly are you trying to do ? ... View more