Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About RAYUDU_NARA
RAYUDU_NARA
Explorer
Member since:
01-20-2017
04-25-2021
Community Statistics
| Posts | 38 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 3 |
| Member Since | 01-20-2017 |
Activity Feed
- Posted Splunk Add-on for Java Management Extension : [main] ERROR - Error executing modular input : null : java.lang.NullPoint on Getting Data In. 04-24-2021 09:58 PM
- Got Karma for KVstore stuck at starting in all cluster members. 06-05-2020 12:50 AM
- Got Karma for How do we add a new indexer and search head to our Splunk instance?. 06-05-2020 12:49 AM
- Got Karma for How to resolve when data is not forwarding to Indexer?. 06-05-2020 12:48 AM
- Karma Re: WatchedFile - File too small to check seekcrc, probably truncated. Will re-read entire file for lguinn2. 06-05-2020 12:46 AM
- Posted Re: KVstore stuck at starting in all cluster members on Splunk IT Service Intelligence. 09-26-2019 10:40 PM
- Posted KVstore stuck at starting in all cluster members on Splunk IT Service Intelligence. 09-26-2019 02:45 AM
- Tagged KVstore stuck at starting in all cluster members on Splunk IT Service Intelligence. 09-26-2019 02:45 AM
- Posted Re: How do we add a new indexer and search head to our Splunk instance? on Getting Data In. 02-28-2018 04:22 AM
- Posted Re: How do we add a new indexer and search head to our Splunk instance? on Getting Data In. 01-09-2018 07:47 AM
- Posted Re: How do we add a new indexer and search head to our Splunk instance? on Getting Data In. 01-09-2018 07:27 AM
- Posted Re: How do we add a new indexer and search head to our Splunk instance? on Getting Data In. 01-09-2018 07:13 AM
- Posted Re: How do we add a new indexer and search head to our Splunk instance? on Getting Data In. 01-09-2018 07:11 AM
- Posted Re: How do we add a new indexer and search head to our Splunk instance? on Getting Data In. 01-07-2018 07:34 AM
- Posted Re: How do we add a new indexer and search head to our Splunk instance? on Getting Data In. 12-26-2017 03:59 AM
- Posted Re: Dash Board on All Apps and Add-ons. 12-11-2017 12:04 AM
- Posted Dash Board on All Apps and Add-ons. 12-07-2017 12:05 AM
- Posted Re: Dash board on All Apps and Add-ons. 12-06-2017 08:20 AM
- Posted Re: Dash board on All Apps and Add-ons. 12-06-2017 07:44 AM
- Posted Re: Dash board on All Apps and Add-ons. 12-06-2017 07:18 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 1 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
04-24-2021
09:58 PM
I am using Splunk Add-on for JMX over the years but in sudden it stopped working and below is the error. So then i have installed latest version in different server and copied inputs, it's working well without any issues. Any idea? why it stopped working and why we are seeing below errors? 2021-04-25 05:51:45,043 - com.splunk.modinput.ModularInput -0 [main] ERROR - Error executing modular input : null : java.lang.NullPointerException at com.splunk.jmx.InfoManager.isJMXAccount(Unknown Source) at com.splunk.jmx.InfoManager.getAccounts(Unknown Source) at com.splunk.jmx.JMXModularInputV3.doRun(Unknown Source) at com.splunk.modinput.ModularInput.init(Unknown Source) at com.splunk.jmx.JMXModularInputV3.main(Unknown Source) 2021-04-25 05:52:55,658 - com.splunk.modinput.ModularInput -0 [main] ERROR - Error executing modular input : null : java.lang.NullPointerException at com.splunk.jmx.InfoManager.isJMXAccount(Unknown Source) at com.splunk.jmx.InfoManager.getAccounts(Unknown Source) at com.splunk.jmx.JMXModularInputV3.doRun(Unknown Source) at com.splunk.modinput.ModularInput.init(Unknown Source) at com.splunk.jmx.JMXModularInputV3.main(Unknown Source)
... View more
Labels
- Labels:
-
modular input
09-26-2019
10:40 PM
No, Splunk Enterprise installed with splunk user and all files owned by splunk user.
... View more
09-26-2019
02:45 AM
1 Karma
Hi,
I had setup a search head cluster with 4 members but not able to launch ITSI app. I think it's due to KVstore issue.
[splunk@********** bin]$ ./splunk show kvstore-status
This member:
backupRestoreStatus : Ready
disabled : 0
guid : 63293D05-FE69-4F0A-B782-0********
port : 8191
standalone : 0
status : starting
Kvstore status stuck at starting, it's not changed to ready at anytime?
... View more
02-28-2018
04:22 AM
Hi @harsmarvania57 - Thank you for you help. few more questions again ,
1) For ITSI app, do we have any seperate config to move to new search head.
2) What happens to scheduled searches – do they move to the new search head?
3) What happens to our non-forwarded inputs – eg, REST (lots of these now). Do they stay on their existing node?
Please suggest.
... View more
01-09-2018
07:47 AM
Thank you @harsmarvania75 , will test it and get back to you.
... View more
01-09-2018
07:27 AM
If we configure auLB frequency method. Data will forward like 40sec to one indexer after 40sec it will forward data to the another indexer. If any one indexer is down, it will forward data to the active indexer. is it correct ?
License:
Now we have license in existing server (indexer and search head is there in that server). after upgrade we will use this server as indexer-1 and will move search head to new server, and indexer-2 also in another new server.
... View more
01-09-2018
07:13 AM
Hi @harsmarvania57 - i accepted your answer that is helpful to me. Thank you.
For more clarity few more doubts, Please suggest.
We want to forward data to the two indexers from all the forwarders. Can you please suggest one good way to configure ? (autoLB or any node configuration)
We have license for existing setup. How we can share with new indexer ?
... View more
01-09-2018
07:11 AM
Hi @nikita_p
Yes, this is really helpful. Thank you.
I have one more doubt, We want to forward data to the two indexers from all the forwarders. Can you please suggest one good way to configure.
We have license for existing setup. How we can share with new indexer ?
... View more
01-07-2018
07:34 AM
Hi Harshil,
I think this is for to make a new server as a search head. How we can disable search head from the existing setup (stand-alone)
... View more
12-26-2017
03:59 AM
Hi Harshil,
Now we have Indexer and search head on same server. We need to disable search head on old server and make it new server as a search head for both the indexer. How we can do this ?
... View more
12-07-2017
12:05 AM
I want to show the services names and the status of the services on one dash board.
... View more
12-06-2017
07:44 AM
url=http://www.google.com/ content_sha224=d300f3403a5cdc4b8d8744824b94816e888a09466b66e8355dce537d total_time=8.56 request_time=8.56 content_md5=042f3f82acbef300711b1a4c07104a48 response_code=200 content_size=2360 timed_out=False title="WCS UAT2 Prod site"
... View more
12-06-2017
06:41 AM
I need one dash board for below data. Like in dash board i want to show, if response_code=200 it is Running if any other response_code it should be Stopped. Please give me the query for the dash board.
url=http://www.google.com/ response_code=200 content_size=2360 timed_out=False title="WCS UAT2 Prod site"
... View more
11-08-2017
03:32 AM
Hi Harshil,
It is very clear. Thanks for your help.
Regards,
Rayudu
... View more
10-31-2017
08:50 PM
1 Karma
We are planning to expand existing Splunk setup.
Present : We have one Splunk indexer (172.16.XX.XX) , we are forwarding data to that indexer and accessing Splunk UI for that server.
Planning : one new indexer in new server (172.16.XX.XX) and one search head in new server (172.16.XX.XX).
Final setup : Two indexers and one search head.
Below are some queries,
• Here, What do we need to install one new indexer and search head ?
• How we can forward data to the new indexer and to the old indexer from all the forwarders ? How we can access Splunk UI for new search head. Any ports or any routes we need to open on new servers ?
• Here, we will forward data to the both new and old indexers , we can access splunk UI for new search head. How we can see the indexing data in Splunk UI ?
... View more
10-04-2017
06:33 AM
Hi ,
we have 8GB License in Splunk Production Index and around 200 forwarders connected to this Indexer. Now a days License reaching around 6GB, still we want to configure few more forwarders. Can you please let me know, how the license consuming and how it eating the license.
License consumes based on the MB/Day or number of files?
If it is depends on MB/Day, per 1GB how much data we can forward ?
... View more
Labels
- Labels:
-
license
09-12-2017
05:17 AM
Hi,
Recently we upgraded Splunk indexer from the version 6.5.2 to 6.6.3. Now we have many SSL errors are there in logs. what are these errors ? Because of these error's any impact on Splunk performance ?
09-12-2017 02:07:33.824 +0100 WARN SSLCommon - Received fatal SSL3 alert. ssl_state='SSLv3 read client hello C', alert_description='handshake failure'.
09-12-2017 02:07:33.824 +0100 WARN HttpListener - Socket error from "IP Address" while idling: error:1408A0C1:SSL routines:ssl3_get_client_hello:no shared cipher
... View more
09-07-2017
02:59 AM
We are planning to increasing Splunk indexers from 1 to 2. So, after this implementation, what are all the necessary changes we need to do at forwarder level.
... View more
08-25-2017
05:21 AM
Hi,
In my production environment we allocated disk space around 800GB but still it's not enough. It is eating lot of disk space. Can someone suggest what are the possible files we can clear in Splunk Indexer in Production Environment.
... View more
08-18-2017
05:14 AM
Trying to forward windows event logs to Splunk indexer. Along with windows forwarder installation event logs forward to the indexer or we need to do any configuration after forwarder installation.
... View more
07-25-2017
04:57 AM
Hi Richgalloway,
It is working fine now. Thank you.
Regards,
Rayudu
... View more
07-10-2017
06:09 AM
Is this configuration need to be done at forwarder level or Indexer level ?
... View more
