Search Fills FlashTimeLine with Events but No Events Display
I have a user that reported he runs a search and the FlashTimeLine fills with over 5,000 events matching his search but the list of events does not display. I get the same results if I run the query...
View ArticleWhat Does This Message Mean - UserManagerPro - Unable to get authentication...
I am setting up a new Search Head server. Everything (almost) seems to be working OK so far but I see this message appearing in the splunkd.log for both of my Indexer Servers:UserManagerPro - Unable to...
View ArticleSplunk app for Active Directory not working in Internet Explorer; Works in...
I am working on the implementation of Splunk App for Active Directory. When using Internet Explorer 8 or 9, there are blank squares (Row 2, Col 1) in both the DC Status page and the DNS Server Status...
View ArticleIs there an App to roll different dashboards in a periodic manner
Hi, i am looking for displaying different dashboards randomly on a monitor. Can this be done in Splunk or using any App?
View ArticleClik here to view.
Installation error 1335 - 64-bit downloaded trial
See screenshot - how do I get past this? Can't ignore or it errors out. Tried multiple different users for different install permissions (also Admin). Please advise. Thanks!
View ArticleIntegrated PDF isn't working and giving error message 'no search job...
python.log: if view.getSearchJobObj() == None: raise Exception("No search job available")
View ArticleHow do I forward csv file in splunk to third party server at udp 517
I would like to forward the csv file in splunk to third party server. In other words, I have exported the results of a search query in splunk in csv file format and trying to send that dat in csv file...
View ArticleHow do I delete all references of a host so it stops showing up on the host...
I've already deleted all references to the host in question in the internal indexes using the "| delete" search command. Additionally, I tried running the "clean" CLI command for both eventdata and...
View ArticleWill streamstats bypass postprocess 50000 limit?
Would be great to know all the commands that will bypass the 50000 postProcess limit
View Articlecustom command help
I wanna code something that my python file will be able to access the sourcetype (eg sourcetype="access_combined") and generate something out and after that i'm able to read some of the interesting...
View ArticleClik here to view.
DATETIME_CONFIG = CURRENT issue in *nix apps
I use *nix apps to monitor runnning processes. I found that the number of processes in splunk event does not match to the actual number of running processes. The splunk event represents 47 processes,...
View ArticleTime zone not working for iis logs
Hi I'm trying to set up a splunk forwarder to splunk storm on a server. I installed the fowarder, registered the auth key. I am recieving data from our own log and iis. The iis log is in UTC i tried...
View Articleenormous amounts of EventCode=4674
Hello everybody,i have a server that produces per minute 13000 security logs with the EventCode=4674 (An operation was attempted on a privileged object). what is the problem and how can i fix it?
View Articlecustom app & data from other app
Greetings,I would like to create custom apps and grant roles access to the new apps however, I would like them to access data from other apps without giving access to those apps.Let me make it more...
View ArticleHow to run subSearch run longer than default time
Hi, when i am running a query, it says sub query has finalized automatically after 30 secs. Where is this configurable? can i mention it in the query for how long it should wait before it is finalized?
View ArticlePDF scheduled view will not display inline. What is the issue? (Splunk v4.3.4)
PDF Server is installed and working. I can schedule a PDF report or view. The report (scheduled search) will display properly inline. However the view will not display inline.When manually opened, the...
View ArticleWhere do I save the script that will install UF on remote servers?
Creating a script that will install UF on remote server, where on my deployment server should I go to save that script?
View ArticleConfigure forwarders from deployment server
I am a complete noob and I need help configuring two forwarders using a deployment server:Forwarder A Need to monitor index.log from 3 apache directories /opt/log/www* << Do I need a whitelist or...
View ArticleProcess to create a certificate using Microsoft Certificate Services locally...
We have a Splunk installation which when opening in the browser we get a certificate error, what is the process to prevent the certificate error if we create a certificate using Microsoft Certificate...
View ArticleSPLUNK DB Connect: Timestamp Not Working
I have specified the column that holds the timestamps for the logs and the format the timestamps are in. However,the time in Splunk is the time when the logs are dumped into Splunk. I need the...
View Article