Search results

  1. Using event types and tags to create an accelerated datamodel search

    create an eventtypes.conf and a tags.conf file.   Step 8: ... object.   Step 9: Add the event type to the tags.conf.   [eventtype ... the eventtypes.conf. Search the eventtypes.conf for any event types that may be useful ...

    Krishan - 07/14/2015 - 10:28

  2. Splunk, Where's my Props?!

    permissions.  Let’s say for example you had a props.conf set at all three levels: ... these helpful tips and you will never be asking,  “Splunk, where’s my props?” ever ...

    Neena - 06/17/2014 - 08:42

  3. Anonymizing Data in Splunk

    a TRANSFORMS statement is called in the props.conf file and is applied ...   —props.conf--- [hr_app] TRANSFORMS-hr_app_logs_mask_data = mask_sn ... the following would work —props.conf— [hr_app] SEDCMD-hr_app_logs_mask_data ...

    Anshu - 08/10/2017 - 08:52

  4. Function1 Announces Sponsorship of Splunk.conf2016!

    conversations tagged  #splunkconf16). Splunk function1.conf.conf2016 sponsorship ... We are excited to announce our Giga-level sponsorship of.conf ... on-boarding. "We've been going to.conf events since its inception ...

    Caroline - 09/22/2016 - 12:47

  5. The Seven Dwarfs of Data On-boarding in Splunk

    to do with your data?  There are attributes you can set in the props.conf ... without testing it first. The attributes in props.conf that I mentioned ... you. There happens to be seven attributes you want to set in props.conf ...

    Rupak - 06/17/2014 - 15:20

  6. OH NO!! Splunking log files with multiple formats?? No problem!

    correctly. You need to use datetime.xml and props.conf (take a look here for more information on props.conf) to ensure that Splunk breaks up each ... in $SPLUNK_HOME/etc. You do this by adding the DATETIME_CONFIG attribute to props.conf ...

    Rupak - 06/17/2014 - 15:20

  7. Passing Time

    of http://static.icr.org/i/wide/biological_clock_wide.jpg Best Practices Big data Machine data props.conf Splunk Web Analytics ...

    Rupak - 06/17/2014 - 15:20

  8. Asset Tagging Before and After WebCenter Sites 11g R1 (11.1.1.8.0)

    Tagging With the latest release of WebCenter Sites 11gR1 (11.1.1.8.0 ... "Tagging" feature. No, not the like the underground art form which took over ... rather the new tagging feature allows end-users to quickly list out words ...

    Mitul - 11/19/2014 - 09:19

  9. Splunk Data Input Pipeline and Processors

    replacements called on in props.conf/tranforms.conf Annotator – extracts ... extractions settings in props.conf to help Splunk run faster. Take a look at my previous blog for more information about those attributes in props.conf ...

    Rupak - 06/17/2014 - 15:20

  10. Keeping your Splunk Deployment Server Organized

    serverclass.conf can not be universally defined by DNS name, IP address, or OS ... be added to the deploymentclient.conf file of any instance of Splunk. While ... client’s SPLUNK_HOME/etc/system/local/deploymentclient.conf, and upon ...

    Kevin - 06/17/2014 - 15:20

Stay In Touch