The dojo of Splunk. Learn, share, teach, mentor.
Videos
Latest Activity
Michael Wilde replied to Nikita's discussion Count failures and success via transaction"How are these transactions linked together... by a field called "ID"? If so.. just build them with the field ID, and then use one of the MV commands to extract a field with success or failure in it. Paste some samples and…"
Hagar's Discussions
Event aggregation
Event aggregationIs there any way to create event aggregation in splunk ? what happened is I got license violations do to Windows security eventlog that repeated itself over 600,000 times in 2 hours…Continue
Started Apr 20, 2010
Welcome, Hagar
Gifts Received
Hagar has not received any gifts yet
Latest Activity
Hagar replied to yanu pratomo's discussion take log windows to splunk without forwarder"I recomand installing snare (http://www.intersectalliance.com/projects/SnareWindows/index.html) on the window machine and sending the event log via syslog to SPLUNK , easy to install,easy to use..."
Hagar replied to Michael Wegener's discussion How to Configure timestamps for events with multiple timestamps"Try without the TIME_FORMAT
leave only the TIME_PREFIX, my guess is that splunk will identified the format itself."
Profile Information
- Are you an existing splunk user?
- Licensed
- What do you do for your day job?
- other
Comment Wall
- No comments yet!
© 2012 Created by Michael Wilde.
