The venerable old-skool Splunk forums are now closed. Feel free to search for old content here, but new posts are no longer supported.

Instead, please visit the thriving community at answers.splunk.com to ask and answer questions about your Splunk deployment and how to get the most out of it.

Forums: Posted by ledio

Topics 1–11 of 11

Topic Author Replies Latest Post
Windows Registry Filters
In: SplunkAdministration (Not tagged)
Not a problem, let me know how it worked for you. I also posted a question/answer to http://answers.splunk.com http://answers.splunk.com/questions/972/how-do-i-create-a-black-list-filter-for-events-coming-from-splunks-windows-regis You ...
Hi aleosolar! I came through your post last week, and on and off I've been looking into this issue ...
kellywilson
Posts
4
 23 months ago...
CRASH: Faulting application splunkd.exe, version 0.0.0.0, faulting module msvcr80.dll, version 8.0.5
In: SplunkAdministration (Not tagged)
Hi "marcelofinki ", Can you please contact Splunk support and give them the crash dump file that ...
Hi "permalink", Can you please contact Splunk support and give them the crash dump file that you ...
marcelofinki
Posts
8
 25 months ago...
Changes to active directory
In: SplunkAdministration (Not tagged)
Hi everyone! Are you guys aware of the Active Directory monitoring input that now ships with Splunk ...
spellanems@state.gov
Posts
3
 27 months ago...
Windows 2008 Event Descriptions not displayed
In: SplunkAdministration (Not tagged)
Hi everyone. I was able to track down the problem related to this issue and fix it. The fix will ...
CerielTjuh
Posts
11
 27 months ago...
Failure to add Event Logs as an Input
In: SplunkSearchAndAlert (Not tagged)
Hi there anon1m0us, If you trying to process your App logs with splunk from the same machine where ...
anon1m0us
Posts
2
 31 months ago...
splunk-wmi crashes regularly
In: SplunkAdministration (Not tagged)
shammons, thank you for letting us know about the exception issue. Will be investigating that further ...
ebrodsky
Posts
6
 37 months ago...
Windows Installation - Service Crashed
In: SplunkGeneral (Not tagged)
linsash and jplonie, setting user credentials via the installer for an existing user should work fine. ...
linsash
Posts
28
 47 months ago...
Memory usage?
In: SplunkPreview (Not tagged)
CK, Which memory are you talking about, is this the virtual memory size, or the actual memory usage ...
cker
Posts
6
 50 months ago...
Windows: splunkd crashes when using UDP network inputs
In: SplunkPreview (Not tagged)
Brian, we released a new preview couple days ago where we have fixed a known issue with UDP processor. ...
As you mentioned we use: name="Microsoft.VC80.CRT" version="8.0.50727.762" How does the data that ...
bstjohn
Posts
3
 50 months ago...
Suggestion: Audit for Windows Registry
In: SplunkPreview (Not tagged)
Yes, it is in our "todo" list... -Ledio
Burana400
Posts
1
 50 months ago...
WinEventLog
In: SplunkPreview (Not tagged)
Dennis, thanks for giving preview a try. 1. %SPLUNK_HOME%\etc\bundles\default\inputs.conf should ...
Yes you're right, the event log message can be up to 64K and we do index all of it. Cheers, Ledi...
"I'm using Splunk preview 2 (20071229) and have not been able to retrieve Security events from Windows ...
Burana400, Currently we extract Application, System and Security event logs. If you look in %SPLUNK_HOME%\etc\bundles\default\input.conf ...
Burana400
Posts
9
 50 months ago...