Dear All, trying to develop the query to mitigate the 'Charge-back' for...
Help me with the query for charge-back concept for retail business! can someone here support me with the syntax arrangement , etc and whatever related to it . please help me with the inputs. i am very...
View ArticleServer error while installing free app
I have free enterprise account, i'm not able to install the app it showing server error, i call splunk support, they are hope less.
View ArticleHow to set up aws cloud trail in splunk app for aws.
where i need to install app ( indexer or search head). If so what is the procedure for that.
View ArticleHow to change the font size of x axis tick label in xml
I want to change the font size of x axis tick label in xml, not able to fix by using chart.fontSize
View ArticleDefine Server Class via IP address and not via Hostname
Hi, Is it possible to define Server Class via IP address and not via host name in Select Forwarders section when creating in Add data section? Tnx
View ArticleHow large kvstore collections impacts memory utilization on search heads(sh...
Hello Splunkers, I am having some questions about how much large kvstore may impact and require physical and virtual memory on search heads . In deed, in my customer deployment, i had troubles with...
View ArticleTroubleshooting Asset Discovery for Ubuntu 14.04
I'm trying to get Asset Discovery working. The scripts work fine from the command line, amd splunk is running as root so it should work. However there are no results and I cannot tell if the script is...
View ArticleSplunk environment upgrade adding additional indexer and forwarder
I have existing splunk setup with 2 indexers and 2 forwarders with clustered architecture. Now we are tryimg to upgrade and introduce new h/w for syslog and additional forwarders and indexers. What...
View ArticleDo you have a ticket system for customer to open a case ticket to seek support?
Dear support Do you have a ticket system for customer to open a case ticket to seek support? if so, please let me know the step. Thanks for your help
View ArticleJoin 3 tables together with conditions
Hi there, I'm into correlation searches now and I'm stuck on a problem combining tree tables, while certain conditions need to be met. In my company administrators do configuration changes according to...
View ArticleSplunk Addon for box, no results
Hello, i'am trying to get some box-logs into Splunk with the mentioned addon above. I was able to do the steps listed in the Documentation and got from the box-support a confirmation that the...
View ArticleHow to troubleshoot why no events are getting indexed in Splunk 6.3.1 on...
Hello guys, I have new Splunk 6.3.1 installation on Centos 6.7. After installation, there are no events coming to Splunk. I reinstalled Splunk, but still no data.. I configured data inputs and the...
View ArticleIs it possible and/or advisable to host an external lookup file on a Windows...
Hi! Is it possible and/or advisable to host a lookup file on a Windows share? We are considering putting it on a central location to be used by multiple search heads. If possible, is the file read and...
View ArticleIs Sideview Utils 3.2.7 compatible with Splunk 6.3?
Before I upgrade to 6.3, wanted to be sure that Sideview Utils 3.2.7 is compatible. Thanks
View ArticleHow to filter out search results where a field value ends with the $ character?
Hello Everyone, Am hitting a snag and need some help. So I have an index whereby we have many account names returned to us from an index. Some of these account names end in the `$` character. I am...
View ArticleCan I use the HTTP Event Collector with Splunk Free?
I'm trying to use the HTTP Event Collector with my home instance of Splunk, but I keep getting a 404 not found error - This isn't because I'm using a Splunk Free license, is it? I don't see the HEC...
View ArticleHow to share the same dashboard on several search heads so that changes...
I have two search head nodes. How can I apply changes on a dashboard of search head 1 to the same dashboard of search head 2? The approach of copying xml-files is not quite satisfied. Is where way to...
View ArticleShould I build out a cluster master with the same hardware spec requirements...
Should I build out a cluster master with the same hardware requirements as my heavy forwarder?
View ArticleHow can I have a pivot table sorted by the sum of column values automatically...
I have created a pivot table in the Pivot Builder and it shows the information that I need. However, I want the pivot table sorted by the SUM of the column values (which is the data I am showing)...
View ArticleHow to set up an alert to trigger only when both Check Point devices in a...
I have a situation where Check Point firewalls work as a pair in HA mode where one device is "hot" while the other is in "stand-by" mode. I need to provide an alert when both devices in a pair fail as...
View Article