Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- About sh_tavousi
sh_tavousi
Explorer
Member since:
02-07-2021
04-07-2024
Community Statistics
| Posts | 19 |
| Solutions | 0 |
| Karma Given | 0 |
| Karma Received | 1 |
| Member Since | 02-07-2021 |
Activity Feed
- Posted Problem in getting logs from Kaspersky on All Apps and Add-ons. 04-07-2024 04:54 AM
- Posted See SQL queries on Splunk on Splunk Search. 05-12-2021 03:04 AM
- Tagged See SQL queries on Splunk on Splunk Search. 05-12-2021 03:04 AM
- Posted Detecting alteration in SQL DB by splunk on Splunk Enterprise. 05-10-2021 11:57 PM
- Tagged Detecting alteration in SQL DB by splunk on Splunk Enterprise. 05-10-2021 11:57 PM
- Posted Re: Load Balancing in UF doesn`t work on Splunk Enterprise. 05-08-2021 11:57 PM
- Posted Re: 2 host with the same names on Splunk Search. 05-08-2021 02:53 AM
- Posted Load Balancing in UF doesn`t work on Splunk Enterprise. 05-08-2021 12:49 AM
- Tagged Load Balancing in UF doesn`t work on Splunk Enterprise. 05-08-2021 12:49 AM
- Posted Antivirus on Splunk Server on Splunk Enterprise. 05-03-2021 04:39 AM
- Tagged Antivirus on Splunk Server on Splunk Enterprise. 05-03-2021 04:39 AM
- Posted backup/export regex saved in extracted field on Splunk Search. 05-03-2021 02:15 AM
- Tagged backup/export regex saved in extracted field on Splunk Search. 05-03-2021 02:15 AM
- Posted Changing address of indexers for universal forwarders altogether on Deployment Architecture. 04-12-2021 09:58 PM
- Tagged Changing address of indexers for universal forwarders altogether on Deployment Architecture. 04-12-2021 09:58 PM
- Posted 2 host with the same names on Splunk Search. 04-06-2021 03:59 AM
- Tagged 2 host with the same names on Splunk Search. 04-06-2021 03:59 AM
- Posted Deployment Error for some clients on Splunk Dev. 03-08-2021 09:19 PM
- Tagged Deployment Error for some clients on Splunk Dev. 03-08-2021 09:19 PM
- Posted Re: deploying stream forwarder to universal forwarders does not work on Splunk Dev. 03-07-2021 10:32 PM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 | |||
| 0 |
04-07-2024
04:54 AM
Hi, I got an error while i want to get logs from Kaspersky Console. I`ve done all the tasks to add it such as port,IP , .... index="kcs" Type=Error Message="Cannot start sending events to the SIEM system. Functionality in limited mode. Area: System Management."
... View more
Labels
- Labels:
-
administration
-
configuration
05-12-2021
03:04 AM
Hi, I want to know how I can see what SQL queries are used on every table of my SQL databases. I mean, I want to monitor queries and users who write those queries. Thanks.
... View more
- Tags:
- SQL queries
05-10-2021
11:57 PM
Hi, I want to know how I can detect if someone alter data in my databases in SQL Server. Also can I do it with DB Connect App. Thanks.
... View more
- Tags:
- sql server logs
Labels
- Labels:
-
using Splunk Enterprise
05-08-2021
11:57 PM
Hi, If we set our 2 indexers in outputs.conf of UFs ,according to the link you sent, UFs send logs to one of them until EOF. Therefore one of our indexers receives logs and by replication, logs will replicate between them. Is it true? As We have 2 indexers and they are clustered I want to know if replication between them is done properly. Thanks.
... View more
05-08-2021
12:49 AM
Hi, I have 2 indexers and I have set them in outputs.conf but my logs are indexed in one of them. I guess load balancing doesn`t work well. I want to know how I can know if load balancing works well as one of my indexers is going full but another is not. We have 2 clustered indexers. Thanks.
... View more
- Tags:
- load balancing
Labels
- Labels:
-
configuration
05-03-2021
04:39 AM
Hi, We have installed Eset security antivirus on our splunk server and we have many problems as when we disable antivirus everything is well. I want to know if antiviruses have any effect on performance of servers. Thanks,
... View more
- Tags:
- antivirus
Labels
- Labels:
-
using Splunk Enterprise
05-03-2021
02:15 AM
Hi, Is there any way to backup/export regex saved in extracted fields as we want to use new instance as a search head and we don`t want to lose our regex saved in extracted fields. Thanks.
... View more
- Tags:
- regex
Labels
- Labels:
-
regex
04-12-2021
09:58 PM
Hi, I want to know how we can change address of indexers for universal forwarders from deployment server as we have many UFs. Is there any way to change inputs.conf of UFs instead of changing one by one. Thanks, Shohre
... View more
- Tags:
- inputs.conf
Labels
04-06-2021
03:59 AM
Hi, I have 2 servers with the same names and I have installed universal forwarder on both servers. In forwarder management I have an issue that sometimes I can see one server another time I can see the other one. How Can I solve this problem to see both of them ? Can I change name of one of the hosts before sending logs to indexers? Thanks, Shohre
... View more
- Tags:
- Forwarder Management
Labels
- Labels:
-
other
03-08-2021
09:19 PM
Hi, I have an issue in Forwarder Management, it says there errors in installing a specific app on some clients however for others the app has been installed without errors. I uninstalled the app but errors still exist. What should I do? Thanks
... View more
- Tags:
- Deployment Error
Labels
- Labels:
-
app
03-07-2021
10:32 PM
Hi, I have installed stream TA on windows. What should I do? Thanks.
... View more
03-07-2021
04:47 AM
Hi, I'm having issue to deploy stream forwarder to UFs by Deployment Server. I have installed stream TA in deployment app but it doesn't work and I can't see forwarders in stream forwarder. In inputs.conf I set splunk_stream_app_location with address of my stream app and also I have stream logs from my stream APP but it doesn't work on UFs. Can anybody help me with this problem? Thanks.
... View more
- Tags:
- Stream Forwarder
Labels
- Labels:
-
app
02-20-2021
10:06 PM
Hi Giuseppe, Yes, logs recognized and not recognized are in the same language. Sourcetype is note the same in both logs. In extracted logs sourcetype=wineventlog but in not recognized logs sourcetype=xmlwineventlog. Shohre.
... View more
02-16-2021
10:42 PM
Hi Yes, I installed Splunk_TA_windows on Forwarders and on Search Heads. In WinEventLog :security and WinEventLog:system, all fields are not extracted like Event Code, Event ID, Account Name and ... . However other hosts do not have any problems and I have all field extracted. I do not run searches in Verbose Mode. My search is " index=main source=WinEventLog :security" and then results in some hosts are not extracted. Shohre
... View more
- Tags:
- yes
02-12-2021
09:20 PM
Hi When I search source="wineventlog:security" or "wineventlog:system" in some hosts in search head, results are not extracted. They are raw but others are extracted properly. I have installed UF on hosts and also I have used Splunk_TA_Windows. I've looked at a lot of conf files and no luck as of yet. Shohre
... View more
02-11-2021
01:44 AM
In some instances, Windows event log fields are not extracted properly but in others they are extracted properly.
... View more
- Tags:
- search
Labels
- Labels:
-
search
02-08-2021
12:04 AM
I want to know where should we install "SolarWinds Add-on Splunk", I mean on deployment server, search head or indexers? Also I want to know if this Add-on can get logs like when they are sent from syslog server.
... View more
- Tags:
- administration
Labels
- Labels:
-
administration
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
04-07-2024
09:34 AM
|
