The venerable old-skool Splunk forums are now closed. Feel free to search for old content here, but new posts are no longer supported.
Instead, please visit the thriving community at answers.splunk.com to ask and answer questions about your Splunk deployment and how to get the most out of it.
Forums: Posted by ssorkin
| Topic | Author | Replies | Latest Post |
|---|---|---|---|
|
Splunk daemon crashes after RPM upgrade from 4.0.2 to 4.0.4
In: SplunkAdministration
(Not tagged)
there is already a bug opened for this: http://jira.splunk.com:8080/browse/SPL-26089
respond to vishal ...
we've seen this in the past when customers use a 32 bit binary for 64 bit machines, somewhere |
10
|
32 months ago... | |
|
help modifying syslog parsing
In: SplunkDev
(Not tagged)
I'd suggest using the regex extraction processor to strip off the first date.
This is achieved by ...
|
3
|
70 months ago... | |
|
Explicitly setting tags?
In: SplunkGeneral
(Not tagged)
Unfortunately this will not work because event types, not events, are tagged.
|
3
|
71 months ago... |