Videos

  • Add Videos
  • View All

Latest Activity

Colin Durrant posted a status
"happy to host a wordpress based website for free for you if that helps."
Jun 17, 2015
Travis Marlette replied to colm kenny's discussion New to Splunk
"I don't know if 'should' is the appropriate term there. This depends entirely on what you want to see, and one of the difficult parts about splunk is getting that criteria.  Let me ask you some questions: 1. Do you have a use…"
Apr 30, 2015
Deb Heller updated their profile
Apr 29, 2015
Profile Iconshane Armbrister, Travis Marlette, Underforge and 15 more joined splunkninja
Apr 29, 2015
Charles Diggs is now a member of splunkninja
Feb 28, 2015
Profile IconRobert Ayers and Mark Ulmer, CISSP joined splunkninja
May 20, 2014
Mike Hartford posted a status
"Hi Michael, I would like to watch your video "Random thoughts about Windows, WMI, Event Logs & Splunk" it is marked Private."
May 1, 2014
Profile IconBudiyanto and Robin Smith joined splunkninja
Mar 31, 2014
Dave Jones
  • Saint Louis, MO
  • United States
Share on Facebook Share on Facebook Share

Gifts Received

Gift

Dave Jones has not received any gifts yet

Give a Gift

 

Dave Jones's Page

Latest Activity

Keith Lawson commented on Dave Jones's blog post Configuring Apache as a reverse proxy to Splunk
"I am still having problems getting Splunk 4 to recognize a Reverse Proxy with .htpasswd file authentication. Can you see if you can get it working your system. With Splunk 3 this worked fine with the following httpd.conf ServerAdmin…"
Feb 1, 2010
Dave Jones commented on Dave Jones's blog post Configuring Apache as a reverse proxy to Splunk
"I'd completely overlooked root_endpoint. I should've looked for that option knowing that the Splunk devs have thought of far more obscure settings. Thanks!"
Nov 16, 2009
Sasha commented on Dave Jones's blog post Configuring Apache as a reverse proxy to Splunk
"Additionally, thanks for your comment on serverfault!"
Nov 16, 2009
Sasha commented on Dave Jones's blog post Configuring Apache as a reverse proxy to Splunk
"True. In that case, you might as well isolate Splunk in its own 'directory' via the following configuration directives: Apache configuration: ProxyPass /splunk http://127.0.0.1:8000/splunk ProxyPassReverse /splunk…"
Nov 16, 2009
Dave Jones commented on Dave Jones's blog post Configuring Apache as a reverse proxy to Splunk
"Sasha, That is more compact if you want to forward ALL requests to Splunk. However, I have other apps running behind that same instance of Apache, so I had to selectively proxy. But thanks for pointing out that it can be made simpler if you only…"
Nov 16, 2009
Sasha commented on Dave Jones's blog post Configuring Apache as a reverse proxy to Splunk
"A more compact version of the Apache2 directives would be: ProxyRequests off ProxyPass / http://127.0.0.1:8000/ ProxyPassReverse / http://127.0.0.1:8000/ Additionally, the following must be set in the Splunk 4.x web.conf: tools.proxy.on =…"
Nov 16, 2009
Dave Jones was featured
Nov 16, 2009
Dave Jones updated their profile
Nov 16, 2009
Dave Jones's blog post was featured

Configuring Apache as a reverse proxy to Splunk

My company has a demo VM running WebSphere Portal, and I also put Splunk on that server to help me troubleshoot it remotely much more efficiently. However, the only public traffic allowed into that VM is over ports 80 and 443.That VM already has an instance of Apache (IBM HTTP Server actually) running, and the WebSphere plugin makes it function as a reverse proxy to WebSphere Application Server. It's configuration handles it's own set of URIs, so I needed to make Apache handle the ones for…See More
Nov 16, 2009
Dave Jones posted a blog post

Configuring Apache as a reverse proxy to Splunk

My company has a demo VM running WebSphere Portal, and I also put Splunk on that server to help me troubleshoot it remotely much more efficiently. However, the only public traffic allowed into that VM is over ports 80 and 443.That VM already has an instance of Apache (IBM HTTP Server actually) running, and the WebSphere plugin makes it function as a reverse proxy to WebSphere Application Server. It's configuration handles it's own set of URIs, so I needed to make Apache handle the ones for…See More
Nov 16, 2009
Dave Jones's blog post was featured

Using the websphere_trlog_sys* source types

Splunk has graciously included the websphere_trlog_sysout and websphere_trlog_syserr source types out of the box. They seem to handle the log entries very well.However, due to the way IBM writes out these logs when they get rolled, you will also need to include the following line in your inputs.conf for your WAS logs:crcSalt = <SOURCE>Otherwise, Splunk will think it has already processed the log and ignore the new ones WebSphere AppServer creates. The Splunk docs describe the crcSalt…See More
Oct 2, 2009
Dave Jones posted a blog post

Using the websphere_trlog_sys* source types

Splunk has graciously included the websphere_trlog_sysout and websphere_trlog_syserr source types out of the box. They seem to handle the log entries very well.However, due to the way IBM writes out these logs when they get rolled, you will also need to include the following line in your inputs.conf for your WAS logs:crcSalt = <SOURCE>Otherwise, Splunk will think it has already processed the log and ignore the new ones WebSphere AppServer creates. The Splunk docs describe the crcSalt…See More
Oct 2, 2009
Michael Wilde left a comment for Dave Jones
"Welcome Dave... thanks for signing up. If you see stuff you need help with, or have hard questions, please post them. If you have ideas for videos i can do.. submit them as well. I'm happy to whip them out... Michael Wilde Splunk Ninja."
Sep 26, 2009
Dave Jones is now a member of splunkninja
Aug 28, 2009

Profile Information

Are you an existing splunk user?
Free
What do you do for your day job?
architecture, admin, and dev, mostly around WebSphere Portal
Web / Blog Address
http://www.perficient.com

Dave Jones's Blog

Configuring Apache as a reverse proxy to Splunk

My company has a demo VM running WebSphere Portal, and I also put Splunk on that server to help me troubleshoot it remotely much more efficiently. However, the only public traffic allowed into that VM is over ports 80 and 443.



That VM already has an instance of Apache (IBM HTTP Server actually) running, and the WebSphere plugin makes it function as a reverse proxy to WebSphere Application Server. It's configuration handles it's own set of URIs, so I needed to make Apache handle the… Continue

Posted on November 16, 2009 at 6:46am — 6 Comments

Using the websphere_trlog_sys* source types

Splunk has graciously included the websphere_trlog_sysout and websphere_trlog_syserr source types out of the box. They seem to handle the log entries very well.



However, due to the way IBM writes out these logs when they get rolled, you will also need to include the following line in your inputs.conf for your WAS logs:



crcSalt = <SOURCE>



Otherwise, Splunk will think it has already processed the log and ignore the new ones WebSphere AppServer creates. The… Continue

Posted on October 2, 2009 at 12:00pm

Comment Wall (1 comment)

At 9:52pm on September 26, 2009, Michael Wilde said…
Welcome Dave... thanks for signing up. If you see stuff you need help with, or have hard questions, please post them.

If you have ideas for videos i can do.. submit them as well. I'm happy to whip them out...

Michael Wilde
Splunk Ninja.

You need to be a member of splunkninja to add comments!

Join splunkninja

 
 
 

© 2017   Created by Michael Wilde.   Powered by

Badges  |  Report an Issue  |  Terms of Service