The venerable old-skool Splunk forums are now closed. Feel free to search for old content here, but new posts are no longer supported.
Instead, please visit the thriving community at answers.splunk.com to ask and answer questions about your Splunk deployment and how to get the most out of it.
Forums: Posted by skaven
| Topic | Author | Replies | Latest Post |
|---|---|---|---|
| Make splunk names clickable in "manage splunks" |
1
|
71 months ago... | |
|
Pre-tuned configurations?
In: SplunkRequest
Tags:
Array
The default configuration that Splunk ships with is completely inadequate for a large enterprise environment. ...
|
–
|
71 months ago... | |
|
unattended installer in 2.0.4 ignores command-line parameters
In: SplunkGeneral
Tags:
install
installer
options
yeah that's what I want to avoid doing since thats what I had to do in 1.x. Since this is something ...
This is the second time I've had to bring up this issue -- the same thing was a problem in the 1.x series. <code> [skaven@byatis ... |
5
|
73 months ago... | |
|
fifoInput not showing up on "Splunk Professional Watch" page
In: SplunkGeneral
(Not tagged)
No, I don't believe it's that. This is on the "Admin" page -- not on the main page where it gives some ...
On the "Admin" page under "data inputs", I see my directory montior and my tailing processor stuff, ... |
3
|
75 months ago... | |
|
directorymonitor not working in 1.2.1
In: SplunkGeneral
(Not tagged)
Sounds like a good system. I think that both a "follow-only" and an "ignore" regex would be useful ...
Is there any way to make the tailing processor ignore files that have been rotated? For example, I've ... Hmm yeah I think this might work. I'll try it out and see if it does what I need. Actually -- when I did the fuser on the file...duh! The process that writes the log data to that file ... Thanks! I'll get on that. I'm having a weird problem with the directorymonitor after moving to the 1.2 series. Before it "just ... |
10
|
75 months ago... | |
|
Website: Updating profile generates 404
In: SplunkGeneral
(Not tagged)
Looks like it's working now. Thanks!
I clicked "My Account", then "Edit User Profile". After filling in my information, I clicked "Save ... |
2
|
76 months ago... | |
|
Detailed Changelogs?
In: SplunkGeneral
(Not tagged)
Yep -- I was going to suggest cvs2cl too!
I upgraded to 1.1.6 today -- working fine so far. But I'm curious as to what exactly was fixed. In ... |
6
|
76 months ago... | |
|
Forums: "developer" tags for developers?
In: SplunkRequest
(Not tagged)
As more of us "regular joe" users get comfortable enough with splunk to start helping the n00bs, it ...
|
–
|
76 months ago... | |
|
lot of questions on setting up Splunk...
In: SplunkGeneral
(Not tagged)
It looks like you need to set up one of two things. Either you need to have your systems all log their ...
|
3
|
76 months ago... | |
|
I want to index different types of data from different systems
In: SplunkAdministration
(Not tagged)
It looks like you need to set up one of two things. Either you need to have your systems all log their ...
|
2
|
76 months ago... | |
|
SysV init script
In: SplunkRequest
(Not tagged)
The /opt/splunk/bin/splunk script is already very well suited to be dropped into /etc/init.d on most ...
|
4
|
76 months ago... | |
|
splunk-announce mailing list
In: SplunkRequest
(Not tagged)
I would really like to be able to sign up for a mailing list that sends out announcements when new versions ...
|
1
|
76 months ago... | |
|
LDAP user authentication
In: SplunkRequest
(Not tagged)
I'll add a request for NIS/Unix passwd authentication here as well.
|
31
|
76 months ago... | |
|
not all event types show after search?
In: SplunkGeneral
(Not tagged)
I'm seeing very strange behavior in 1.1.5 with search results. For example, I click on a source at ...
|
1
|
76 months ago... | |
|
Installer ignores install path directive
In: SplunkGeneral
(Not tagged)
Actually...it's happening again:
[skaven@i-dl385 ~]$ du -shc /opt/mpd/splunk/var/lib /tmp/splunk-cache ...
Weird...I haven't been able to reproduce this problem. I guess it was a weird corner-case after upgrading ... I just installed 1.1.5, and as my root partition is pretty small, I wanted the splunk DB to reside in ... |
3
|
76 months ago... | |
|
"index a file now" changed in 1.1.5?
In: SplunkGeneral
(Not tagged)
I just discovered that this was because you have to click "browse" in order for the "index now" button ...
I've got a one-off 2GB Apache log that I want splunk to chew on. It seems that in 1.1.5, the "index ... |
2
|
76 months ago... | |
|
"menu bar" disappears after adding users
In: SplunkGeneral
(Not tagged)
I was able to get this same effect by clicking the "admin" link while at the main page. Seems to only ...
I just installed 1.1.5, and noticed that after adding two users (a "root" admin user, and a "splunk" ... |
1
|
76 months ago... | |
|
Sorting operators
In: SplunkRequest
(Not tagged)
Currently splunk sorts by time. It would be nice to be able to switch from ascending to descending, ...
|
1
|
76 months ago... | |
|
"splunk stop" does not clean up all processes
In: SplunkGeneral
(Not tagged)
It seems that if I stop splunk wile a query is going on, processes like this hang around despite the ...
|
1
|
77 months ago... | |
|
Segfults on SMP boxes - update from your friends at Splunk
In: SplunkGeneral
(Not tagged)
hey hey! I managed to get a core file! Where should I send it?
Well that didn't take long -- splunkd died just as it finished indexing my 2GB Apache error log. I ... I couldn't get splunkd to crash before 1.1.5 came out -- I've installed 1.1.5 and will test it. I hacked the splunk startup script a bit and seem to have gotten it running in the "nodaemon" mode...hopefully ... Hmm...I followed the directions with the --nodaemon thing, but that only seems to start splunkd, not ... I think I may be getting bitten by these SMP segfaults. I'm running splunk on a dual processor, dual-core ... |
|
12
|
77 months ago... |
