Display days on a dropdown to do advance xml chart search
Anyone knows how to display a drop-down with number of days so that I can search for the data on that day. If Splunk cannot do it in days, how about month ?
View ArticleGoogle map is not enough ! enhancements ?
Hi Splunk professional, I need to use Google map for professional presentation, other then http://splunk-base.splunk.com/answers/48631/alterations-to-the-google-maps-app. What else can we really use to...
View ArticlePossible memory leak in 4.3.6
Hello,I have an environment with 2 search heads and 2 indexers. There are 70ish forwarders which send around 50 MB data a day. lsof -i :port | wc -l # shows established connections 70 On one search...
View Articletimestamp extra
I put some oracle-exported data into splunk, with props.conf:NO_BINARY_CHECK = true CHARSET = GB2312 SHOULD_LINEMERGE = false TIME_PREFIX =...
View ArticleDISABLED_DUE_TO_GRACE_PERIOD
I have seen many questions about disabled due to licensing violation, but I applied a reset key and now I have this message during a search from the search head: restricting search to internal indexes...
View ArticleWhat parameters do the "intention" have in dashboard?
Hi Splunkers, I have a question about the following XML. <module name="ConvertToIntention"> <param name="settingToConvert">index_setting</param> <param name="intention"> <param...
View ArticleSplunk stop indexing at 12am ?
May I ask why my splunk will stop running at 12am everyday ? I am using modular input and can it be my python codes problem ?
View ArticleTwitter credentials error !!
Hi splunkers,I got the errors in "Twitter for Splunk". http://splunk-base.splunk.com/apps/56296/twitter-for-splunkAnd logs show.07-06-2013 22:15:35.035 +0900 ERROR FrameworkUtils - Incorrect path to...
View Article# The lookup table 'oracle_actions' does not exist. It is referenced by...
weblogic server apps installed. Then I see the error. What I can do for this issus?!
View Articlehow to get click value in a search of another view with tab switcher
I have a form with a Table. I am trying to send 'click value' to a view with Tab Switcher. I am not able to get the 'click value' in the search query of the view with the tab switcher and the result is...
View ArticleGoogle map overlay GIF animation ?
Can Google map plot GIF animation as I know they can only put static image PNG. Thanks in advance.
View ArticleMigrate splunk
Im trying to migrate Splunk to a new server and I'm following the steps in the wiki [Migrating a Splunk installation][1] [1]: http://wii.splunk.com/Deploy:Migrating_a_Splunk_Install but I have a...
View ArticleSingle Value Dashboard Display
Hello Everybody,I'm kind of new with Splunk. I'm self learning. I'm trying to duplicate a great Dashboard i found in the Internet.hxxp://i.imgur.com/3nyoW2W.jpgBut I don't know how to create this...
View ArticleHow do I turn off debug in btool.
I am having an issue with lag time in my scheduled searches of time. I am looking for all time of issues that may slow down my machines. One this I found was debug in the btool logs. How do I turn off...
View ArticleConfigure Splunk theme
Hello, I would like to splunk that style black I saw in some pictures out there. Ocean Theme I saw there, as I can install this? If you look from the App search from the same splunk, not found, and...
View Articlehow do i combine multiple fields in to a single field??
hi..I have four fields say A,B,C,D..All these are multivalued fields .. i.e for a single event they can be multiple values in these fields..how can i join them in to a single field ??used eval...
View ArticleMultiple Table Join in DB Connect
In the SQL Query of a Database Input, is it possible to join multiple tables while preserving the rising column as the tailing value?For example the following returns a "SQL command not properly ended"...
View ArticleCounter for when event occurs one or more times
I want to set up a search for when an event occurs one or more times in a minute (just whether or not it occurred not the total count). This along with sum stats functions I'll use to figure out...
View ArticleDB dump not generating results
HelloI am using DB Connect app to get data from a Oracle DB. Everything works fine, but when it runs this query it says no results are generated. But this query does have data in the DB. Is there...
View ArticleRegex expression correction
I used (?i)location : (?P<current_location>.+) to extract the location. But it always extract the word below it (None). Anyone knows how to solve this ? I need to extract only Choa Chu Kang.My...
View Article