Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Splunk Answers
- :
- About ssearwar
ssearwar
Explorer
Member since:
05-10-2013
11-18-2022
Community Statistics
| Posts | 17 |
| Solutions | 0 |
| Karma Given | 1 |
| Karma Received | 2 |
| Member Since | 05-10-2013 |
Activity Feed
- Karma Re: Forwarder not forwarding for 6 hours every day. for linu1988. 06-05-2020 12:46 AM
- Got Karma for Forwarder not forwarding for 6 hours every day.. 06-05-2020 12:46 AM
- Got Karma for Re: Forwarder not forwarding for 6 hours every day.. 06-05-2020 12:46 AM
- Posted Re: Forwarder not forwarding for 6 hours every day. on Getting Data In. 02-19-2014 04:17 AM
- Posted Re: Forwarder not forwarding for 6 hours every day. on Getting Data In. 02-18-2014 11:53 AM
- Posted Re: Forwarder not forwarding for 6 hours every day. on Getting Data In. 02-18-2014 11:25 AM
- Posted Re: Forwarder not forwarding for 6 hours every day. on Getting Data In. 02-18-2014 10:56 AM
- Posted Re: Forwarder not forwarding for 6 hours every day. on Getting Data In. 02-12-2014 04:35 AM
- Posted Re: Forwarder not forwarding for 6 hours every day. on Getting Data In. 02-11-2014 08:23 AM
- Posted Re: Forwarder not forwarding for 6 hours every day. on Getting Data In. 02-11-2014 07:14 AM
- Posted Re: Forwarder not forwarding for 6 hours every day. on Getting Data In. 02-11-2014 06:55 AM
- Posted Re: Forwarder not forwarding for 6 hours every day. on Getting Data In. 02-10-2014 12:10 PM
- Posted Re: Forwarder not forwarding for 6 hours every day. on Getting Data In. 02-10-2014 11:27 AM
- Posted Re: Forwarder not forwarding for 6 hours every day. on Getting Data In. 02-10-2014 10:55 AM
- Posted Forwarder not forwarding for 6 hours every day. on Getting Data In. 02-10-2014 10:39 AM
- Tagged Forwarder not forwarding for 6 hours every day. on Getting Data In. 02-10-2014 10:39 AM
- Tagged Forwarder not forwarding for 6 hours every day. on Getting Data In. 02-10-2014 10:39 AM
- Posted Default Navigation Menu not loading. on Dashboards & Visualizations. 10-18-2013 10:05 AM
- Tagged Default Navigation Menu not loading. on Dashboards & Visualizations. 10-18-2013 10:05 AM
- Tagged Default Navigation Menu not loading. on Dashboards & Visualizations. 10-18-2013 10:05 AM
Topics I've Started
| Subject | Karma | Author | Latest Post |
|---|---|---|---|
| 1 | |||
| 0 | |||
| 0 |
02-19-2014
04:17 AM
You're right. It's every 5 hours. And yes, a proper timestamp in the log would be the best option. Thanks.
... View more
02-18-2014
11:53 AM
Had to edit the entries due to sensitive data.
INFO Feb 18 11:25 com.web.struts.ViewSummary - randomcharacters.stuff : Retrieving information.
INFO Feb 18 11:25 com.web.struts.ViewDetail - randomcharacters.stuff : Getting details for document randomnumbers
INFO Feb 18 11:25 com.web.struts.ViewSummary - randomcharacters.stuff : User Annuities Robot_test owns document: MONITOR
... View more
02-18-2014
11:25 AM
Nothing there between 08:59:24 AM and 14:01:01 PM.
... View more
02-18-2014
10:56 AM
The forwarder appears to be functioning properly. It is forwarding all other logs on the server execpt for a small handfull.
... View more
02-12-2014
04:35 AM
It seems to be just the log data. Although there is another log in the directory that is being forwarded just fine. It's just 4 logs that stop being forwarded.
... View more
02-11-2014
08:23 AM
I know that splunk can grab date from the source file's modification time, so I don't understand why it would work most of the time and then not work for a specific duration.
... View more
02-11-2014
07:14 AM
Hmmm, I think their time format in their logs is bad. I don't see a year.
... View more
02-11-2014
06:55 AM
Nothing fancy. The raw data is "Feb 11 09:47" format. Like I said, data gets indexed correctly then stops at 9am. I've checked "all time" and nothing shows.
... View more
02-10-2014
12:10 PM
No one is killing the process. REL 6 x86_64. Logrotation is on, but doesn't occur until midnight. It's just an application file that is perfectly fine until 9am and starts working again at 2pm.
... View more
02-10-2014
11:27 AM
1 Karma
Ok. The forwarder was restarted to see if forwarding would kickstart. Found a few errors.
ERROR TailingProcessor - File will not be read, seekptr checksum did not match (file=....). Last time we saw this initcrc, filename was different. You may wish to use a CRC salt on this source. Consult the documentation or file a support case online at http://www.splunk.com/page/submit_issue for more info.
ERROR TailingProcessor - Ignoring path="/apps/splunk/splunkforwarder/var/log/splunk/.metrics.log.swp" due to: Bug: tried to check/configure STData processing but have no pending metadata.
... View more
02-10-2014
10:55 AM
No errors for the log that I need:
02-10-2014 11:02:53.021 -0500 INFO WatchedFile - Will begin reading at offset=1236998 for file='....
... View more
02-10-2014
10:39 AM
1 Karma
I'm running 6.01 server and forwarders. I've got a couple of linux servers that are not forwarding between a 6 hour period of time everyday for a particular log. Can someone point me in the right direction to correct this issue?
... View more
- Tags:
- monitoring
- time
10-18-2013
10:05 AM
The default Navigation Menu for an app is not loading when loaded in the nav folder.
From the ui, I see the the following message, but there are is no "New" button or "Add new" in the User Interface section for Navigation Menu:
"There are no configurations of this type. Click the "New" button to create a new configuration."
Is this a bug with 6.0?
... View more
10-04-2013
05:07 AM
I'm going from 5.0.4 to 6.0. I'm not sure if the extract was interrupted on the first run, but I extracted 6.0 again on top of what I had and the correct page shows up now. Although the Forwarder Management page would not work until I removed my existing serverclass.conf file and start from scratch. My endpoint now shows manager/system/deploymentserver#deployment_server_classes
... View more
10-03-2013
10:31 AM
I extracted splunk again, and now I can see Forwarder Management.
... View more
10-03-2013
08:51 AM
I'm seeing it in the webui when I click on deployment server.
... View more
10-03-2013
08:27 AM
After installing Splunk 6 from 5.0.4 I cannot access the deployment servers.
404 Not Found
Splunk cannot find "deployment/serverclass".
... View more
