Splunk is a tool for collecting, monitoring, and analyzing log files from servers, applications, or other sources.

learn more… | top users | synonyms

0
votes
2answers
445 views

How Fortigate 100D send log to Splunk

I have a Fortigate 100D with FortiOS 5.06 , this is my setting config log syslogd setting set status enable set server “192.168.7.4″ set reliable disable set port 515 set csv disable set facility ...
1
vote
1answer
59 views

Can I forward events from Splunk 3 to Splunk 4?

I've only used Splunk 4 before and I was wondering if setup a Splunk 3 server to forward to another Splunk 4 server. The reason I'd need to do this is because I have an old Mac OS X 10.4.11 PowerPC ...
0
votes
1answer
197 views

HA proxy and keepalived with Splunk search heads

Is anyone using haproxy/keepaliveD as their software load balancer in a HA search head environment? I am configuring my haproxy.cfg and having some trouble getting sticky sessions and proper load ...
0
votes
1answer
93 views

How can I import Splunk data into XpoLog?

How can I export the data into XpoLog and Index it with XpoLog Analytic module? Do I need to reindex the data or there is any migration tool for that? Thanks!
0
votes
1answer
1k views

Setting up Splunk/IronPort WSA

I recently stumbled across Splunk 4 (by way of an advert on this very site...) and found that it had an "App" that's designed to work with Cisco IronPort WebSecurity and E-Mail Appliances! That's ...
1
vote
0answers
113 views

Capturing Regex in Splunk

I'm trying to grab the directory paths of GET requests and count them in Splunk using this capturing regex. index=main sourcetype="access_combined_wcookie" | rex "(?i)\"GET /(?P<MYDIR>\w+)/" | ...
0
votes
0answers
28 views

Monitoring solution that doesn't duplicate source data?

I need to analyze data stored in multiple databases. Each of them contains a few TB of logs and sensor data. If I use Splunk or ElasticSearch/Kibana, I see 2 solutions: Batch import everything ...
0
votes
0answers
98 views

Unable to access Splunk via port number on Ubuntu 12.04

Ubuntu 12.04 Server x64 & Splunk 6.0 I installed Splunk according to the documentation. Started Splunk as directed and I am able to see it running in the terminal. I believe I correctly added the ...
0
votes
0answers
86 views

Fail to generates a DD-WRT log to Splunk

I'm fail to generates a DD-WRT log to Splunk. While I did enable syslog and log management at DD-WRT, also specify the remote server which is abc.com:8000. Therefore, I have open the UDP port as 514 ...