SPLUNK LIFE

Smart AnSwerS #10

Hey there Splunk community and welcome to the 10th installment of Smart AnSwerS.

This has felt like a very long week, but what better way to start unwinding than with board game night Thursday at the office! A friend of mine was recently doing research on how people discover awesome board games and the answer was almost always, “friends introduce me to new ones whenever we have board game days, nights, weekends, etc.” I’ve certainly been introduced to new board games at Splunk I never would have found on my own and get to experience it with folks equally as interested in the discovery of awesomeness. Of course, before we play hard, we have to work hard too! – Check out this week’s featured Splunk AnSwerS posts:

How to rollback buckets from cold to warm?

joxley had just upgraded an indexer to have two sets of drives and with the new setup, there was a lot of data in the cold path that needed to roll from cold buckets back to warm. lguinn gives a very clear-cut step-by-step answer for users to follow. One and done!
http://answers.splunk.com/answers/208985/how-to-rollback-buckets-from-cold-to-warm.html

What is the process to move an infrastructure from virtual machines to physical machines in our Splunk 6.1.3 environment?

lguinn strikes again to in this post to help gajananh999 understand how to move a Splunk index clustering infrastructure from virtual to physical machines. The recommended process is very thorough with important points to consider depending on the environment you are migrating to and from–such as file paths for config files, directory structure, machine names and IP addresses. An excellent read.
http://answers.splunk.com/answers/210285/what-is-the-process-to-move-an-infrastructure-from.html

How do I display a list of PIDs for all searches running in my environment with a timerange of all-time?

jwoger_splunk from the Splunk Support team decided to share this very useful question with the community that I’ve seen pop up a handful of times on Splunk Answers. His all-knowing alter ego Joetron provides a great search leveraging a script from the S.o.S. – Splunk on Splunk app. He also includes some nice visuals of the expected output to boot!
http://answers.splunk.com/answers/212284/how-do-i-display-a-list-of-pids-for-all-searches-r.html

Thanks for reading folks and enjoy the weekend!

Missed out on the first nine Smart AnSwerS blog posts? Check em out here!
http://blogs.splunk.com/author/ppablo

Patrick Pablo
Posted by

Patrick Pablo

Born and raised in Los Angeles, Patrick made his way up north for college and fell in love with the Bay Area, making it his second home. After working 5 years for a non-profit as a college & career counselor in San Francisco public high schools, he stumbled across a new career opportunity himself! Patrick found a new way to apply his community organizing background in a way he didn’t know was possible at Splunk.

Join the Discussion