Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About priyanka_231019
priyanka_231019
Explorer
Member since:
03-05-2020
12-06-2021
Community Statistics
| Posts | 18 |
| Solutions | 0 |
| Karma Given | 3 |
| Karma Received | 0 |
| Member Since | 03-05-2020 |
Activity Feed
- Posted Re: Dashboard Studio not loading in Firefox in Splunk 8.2.2.2 on Deployment Architecture. 12-05-2021 10:15 PM
- Karma Re: Dashboard Studio not loading in Firefox in Splunk 8.2.2.2 for gjanders. 12-05-2021 10:15 PM
- Posted Re: Dashboard Studio not loading in Firefox in Splunk 8.2.2.2 on Deployment Architecture. 12-05-2021 09:44 PM
- Posted Dashboard Studio not loading in Firefox in Splunk 8.2.2.2 on Deployment Architecture. 11-30-2021 09:14 PM
- Posted Re: Splunk dashboard studio -- Schedule PDF Delivery not available on Dashboards & Visualizations. 11-29-2021 11:29 PM
- Posted Splunk add-on for tripwire on All Apps and Add-ons. 11-02-2021 11:48 PM
- Posted Re: How to install Tripwire Enterprise Add-On Splunk 8.2.1 on All Apps and Add-ons. 11-02-2021 11:47 PM
- Posted WSUS - How to get approved / unapproved windows update logs? on Getting Data In. 11-01-2021 01:05 AM
- Posted Why is DB Connect Data Input giving error with rising column? on All Apps and Add-ons. 08-16-2021 06:22 AM
- Tagged Why is DB Connect Data Input giving error with rising column? on All Apps and Add-ons. 08-16-2021 06:22 AM
- Tagged Why is DB Connect Data Input giving error with rising column? on All Apps and Add-ons. 08-16-2021 06:22 AM
- Tagged Why is DB Connect Data Input giving error with rising column? on All Apps and Add-ons. 08-16-2021 06:22 AM
- Posted Re: How to extract the required keywords using REGEX on Splunk Enterprise. 06-28-2021 09:49 PM
- Posted Data ingestion from AIX 6 on Getting Data In. 05-05-2021 06:26 AM
- Tagged Data ingestion from AIX 6 on Getting Data In. 05-05-2021 06:26 AM
- Tagged Data ingestion from AIX 6 on Getting Data In. 05-05-2021 06:26 AM
- Tagged Data ingestion from AIX 6 on Getting Data In. 05-05-2021 06:26 AM
- Posted Re: The search job terminated unexpectedly. on Splunk Search. 03-17-2021 07:06 AM
- Posted The search job terminated unexpectedly. on Splunk Search. 03-17-2021 02:53 AM
- Tagged The search job terminated unexpectedly. on Splunk Search. 03-17-2021 02:53 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
12-05-2021
10:15 PM
The browser was an issue. It's working fine in the latest version.
... View more
12-05-2021
09:44 PM
It's an issue for us in FF ver 56. However, we will try to upgrade it first to see if it works or not.
... View more
11-30-2021
09:14 PM
We recently upgraded our Splunk from 8.1.4 to 8.2.2.2. After the upgrade the dashboard studio is working fine in Google Chrome but we see a blank page while trying to open the same in Firefox
... View more
Labels
- Labels:
-
other
11-29-2021
11:29 PM
Hi, Did you receive any reply on this topic?
... View more
11-02-2021
11:48 PM
Anyone recently used splunk add-on for tripwire? Their website do not have the correct installation file.
... View more
Labels
- Labels:
-
configuration
-
installation
11-02-2021
11:47 PM
Hi, Any luck with the add-on? Also, from where you got the installation package.
... View more
11-01-2021
01:05 AM
Hi, We are able to fetch update logs from our WSUS server using add-on for windows. However, we want to display approved/unapproved update status in Splunk itself without having to go to the server. Any suggestions.
... View more
Labels
- Labels:
-
Windows
08-16-2021
06:22 AM
Hi,
The query was working fine for the lower environment. When we tried configuring the same in production, it is failing with the following error.
Error: [DBX-QUERY-WORKER-166] ERROR com.splunk.dbx.command.DbxQueryServer - operation=dbxquery connection_name=XXXXX stanza_name= action=dbxquery_server_worker_failed
At our side,
1. We have checked the connection is working fine.
2. The input query is working fine in the batch mode.
3. We have checked the DB connect logs and we are not seeing anything other than the above mentioned error.
Kindly suggest how to proceed from here.
... View more
Labels
- Labels:
-
administration
06-28-2021
09:49 PM
Try replacing rex statement with rex field=_raw "message:(?<message>[\w\s]+)"
... View more
05-05-2021
06:26 AM
We have an IBM AIX 6 instance from where we want to fetch data in Splunk. It is not supported by IBM anymore. Has someone been sending data from AIX 6 to Splunk? Need guidance.
... View more
Labels
- Labels:
-
other
-
universal forwarder
03-17-2021
07:06 AM
I did some digging at my end. Apparently, some issue with the search query itself. This query was working fine. The multireport is somehow now causing search to terminate. If I run the query in two parts as below, it is fine. index=oswinsec source="*WinEventLog:Security" action=success | stats count min(_time) as earliest max(_time) as latest by user | stats values(*) as * by user | lookup account_status_tracker user OUTPUT count as prior_count earliest as prior_earliest latest as prior_latest | where prior_latest < relative_time(now(), "-30d") | eval explanation="The last login from this user was " . (round( (earliest-prior_latest) / 3600/24, 2) ) . " days ago." | convert ctime(earliest) ctime(latest) ctime(prior_earliest) ctime(prior_latest) index=oswinsec source="*WinEventLog:Security" action=success | inputlookup append=t account_status_tracker | stats min(earliest) as earliest max(latest) as latest sum(count) as count by user | outputlookup account_status_tracker
... View more
03-17-2021
02:53 AM
Splunk internal logs: INFO StreamedSearch - Streamed search connection terminated Splunk search: index=oswinsec source="*WinEventLog:Security" action=success | stats count min(_time) as earliest max(_time) as latest by user | multireport [| stats values(*) as * by user | lookup account_status_tracker user OUTPUT count as prior_count earliest as prior_earliest latest as prior_latest | where prior_latest < relative_time(now(), "-30d") | eval explanation="The last login from this user was " . (round( (earliest-prior_latest) / 3600/24, 2) ) . " days ago." | convert ctime(earliest) ctime(latest) ctime(prior_earliest) ctime(prior_latest) ] [| inputlookup append=t account_status_tracker | stats min(earliest) as earliest max(latest) as latest sum(count) as count by user | outputlookup account_status_tracker ] | stats count The search was working fine until today. Kindly suggest.
... View more
Labels
- Labels:
-
search job inspector
08-11-2020
07:51 AM
Hello, What was the process you followed to fetch logs from Dell Switches?
... View more
08-10-2020
09:34 AM
The issue is resolved. I had to update props.conf for TZ settings.
... View more
08-09-2020
11:24 PM
Hi I am unable to search my data unless I specify all time.
... View more
Labels
- Labels:
-
other
08-09-2020
02:28 AM
I want to onboard McAfee EPO Cloud data. While there is an add-on available for on-prem solution of McAfee EPO, it does not support cloud as per documentation (or atleast it's not mentioned explicitly). Please guide me how can I proceed here.
... View more
- Tags:
- McAfee EPO
Labels
- Labels:
-
syslog
03-05-2020
05:36 AM
Hi,
We are facing same issue with our app. Did you find any solution?
... View more
