About frankfowler

frankfowler · ‎09-10-2020

I dont see this as working : I have transforms.conf and props.conf set as you stated above in my etc/system/local area. my search is as follows : index=xxx | eval myDynamicSource=source | collect index=xxx source=myDynamicSource i see the source still set to myDynamicSource. what am i missing ?

frankfowler · ‎02-21-2017

that is for version 1 of dbConnect - what about version 2 ?

frankfowler · ‎05-09-2013

beautiful ! thx

frankfowler · ‎05-09-2013

any way to turn the search history off ?

frankfowler · ‎05-01-2013

I have DBX currently on a standalone splunk install (acting as both SearchHead and Indexer). I need to be able to send DB data retrieved via DBX to multiple indexers (not just the splunk instance that DBX is installed on). How is this configured ?

frankfowler · ‎02-14-2012

you can control what is displayed on the Manager page via the authorize.conf file. more info here : http://docs.splunk.com/Documentation/Splunk/4.3/admin/Addandeditroles#List_of_available_capabilities http://docs.splunk.com/Documentation/Splunk/4.3/admin/Addandeditroles#List_of_available_capabilities

frankfowler · ‎02-14-2012

you can control what is displayed on the Manager page via the authorize.conf file. more info here : http://docs.splunk.com/Documentation/Splunk/4.3/admin/Addandeditroles#List_of_available_capabilities http://docs.splunk.com/Documentation/Splunk/4.3/admin/Addandeditroles#List_of_available_capabilities

Posts	7
Solutions	0
Karma Given	0
Karma Received	1
Member Since	‎05-23-2011

Online Status	Offline
Date Last Visited	‎09-12-2020 06:31 PM

Turn Search History off ?

sending data to multiple indexers

Re: How to set the source in a collect command to ...

Re: DB Connect App Encryption

Re: Turn Search History off ?

Turn Search History off ?

sending data to multiple indexers

Re: Restrict access to "Manager"

Re: Block access to Manager