Stack Overflow
Stack Overflow

Questions tagged [splunk]

Splunk is a tool for collecting, monitoring, visualizing and analyzing machine data from any source. You may receive faster responses at answers.splunk.com which is actively monitored by Splunk employees

Splunk

You may receive faster responses at community.splunk.com which is actively monitored by Splunk employees

Splunk is a tool for collecting, monitoring, and analyzing log files from servers, applications, or other sources. The primary features of Splunk include:

  • Collecting logs from multiple sources into a single location to allow for use without needing to access individual servers.
  • Parsing of logs with arbitrary formats, including free-form logs with no defined fields
  • Advanced querying of logs, including
    • combining results from different sources
    • filtering based on identified field values and pattern matching
    • analyzing records using statistical and mapping functions
  • visualizing real-time data
  • the ability to create dashboards of various visualizations

The name "Splunk" comes from a rewriting of spelunking, a cave exploring hobby.

Splunk is available as both an enterprise application that runs on your servers (with a free tier) and a hosted service known as Splunk Cloud.

Useful links

2246 questions
3
votes
3 answers

Getting errors when running Splunk SDK examples: "No appropriate protocol (protocol is disabled or cipher suites are inappropriate)"

I downloaded Splunk Java SDK from website (http://dev.splunk.com/sdks) and trying to run it under jdk1.8.0_91 (windows 10). However I am getting exception. How do I make it work? "C:\Program Files\Java\jdk1.8.0_91\bin\java"…
vmg
  • 9,920
  • 13
  • 61
  • 90
3
votes
1 answer

Splunk is conflicting with GMSServices

splunk is conflicting with GMSServices which make app crash. if i start splunk session GMSPicker crash the application and shows. func application(application: UIApplication, didFinishLaunchingWithOptions launchOptions: [NSObject: AnyObject]?) ->…
Alizain Prasla
  • 744
  • 2
  • 15
  • 37
3
votes
2 answers

Lazy man logging

I have a spring application serving web requests. Each request method looks like this @RequestMapping(value = someUri, method = RequestMethod.POST) Response someUriProcessor (SomeRequestModelMethod request) throws Exception { try (JsonLogger…
alexey
  • 126
  • 1
  • 6
3
votes
1 answer

splunk query for counting based on regex

My sample log looks like below fixed message: 443-343-234-event-put fixed message: wre-sdfsdf-234-event-keep-alive fixed message: dg34-343-234-event-auth_revoked fixed message: qqqq-sdf-234-event-put fixed message:…
Laxmikanth Samudrala
  • 2,203
  • 5
  • 28
  • 45
3
votes
2 answers

Print works fine, but when I write() the same thing to file, I get "Expected a character buffer object"?

I'm working with Splunk, but this seems to be a python-related problem I'm having. By an API call, I'm receiving a list of dictionaries, and I'm iterating through the individual dictionaries to print out a specific field. It looks like this: with…
Reciever80
  • 105
  • 1
  • 1
  • 10
3
votes
2 answers

Using AngularJS to connect to Splunk's REST API, how do I resolve CORS issue?

When I try to post data from AngularJS, I am getting the below error. XMLHttpRequest cannot load https://localhost:8089/services/auth/login. No 'Access-Control-Allow-Origin' header is present on the requested resource. Origin…
Murali Mohan
  • 126
  • 7
3
votes
0 answers

Export/stream massive results from splunk REST API

I need to export a massive number of events from splunk. Hence for performance reasons i resorted to directly using the REST API in my python code rather than using the Splunk SDK itself. I found the following curl command to export results. This…
user720694
  • 2,035
  • 6
  • 35
  • 57
3
votes
1 answer

How to get negative lookahead in regex to accept more words

I am trying to get some data for Splunk. From this: this my line - Fine (R/S) more date - I like this (not) date - output (yes) I like to get all data from - to the end of line, but not the data in parentheses if it contains not or yes, so data in…
Jotne
  • 40,548
  • 12
  • 51
  • 55
3
votes
1 answer

Spring Integration with Splunk

I have a Question in Spring Integration to retrieve data from splunk. I have configured an splunkInboundChannelAdapter with Non-Blocking option to pull the data from splunk. I have added a query in the "search" attribute in the defintion of…
SpringForLiving
  • 599
  • 2
  • 5
  • 12
3
votes
1 answer

Is it possible to send logs directly to splunk cloud using JavaScript as Google Analytic does?

I want to track some client side interactions using splunk. I want to know whether it is possible using JavaScript to send some information (logs) to splunk cloud directly ? Google analytic does the same .
Rishi
  • 1,279
  • 3
  • 20
  • 37
3
votes
2 answers

Splunk Java integration with JUnit

I have made a module that lets me integrate with splunk using the Java SDK. We're using 1.2.1.0 via maven. My module seems to work great. However, I want to put junit unit tests around it. I created tests that attempt to get back the most…
mjwenk
  • 428
  • 3
  • 12
3
votes
1 answer

3D lines not rendering out of WebGL Globe (potential CSS conflict?)

I am trying to add a WebGL Globe visualization into a custom SaaS application (Splunk) and instead of getting lines out of the globe, I only see dots. I suspect the application has its own CSS or something that is overriding and hiding or…
hobbes3
  • 28,078
  • 24
  • 87
  • 116
3
votes
2 answers

Splunk combining multiple logs

For some reason splunk is combining multiple logs. I am logging each time a user logs in for statistical reasons. I expected that in splunk I would get one line per log, such as the following: TIMESTAMP user of type=1 has logged…
Nick Humrich
  • 14,905
  • 8
  • 62
  • 85
3
votes
3 answers

Find distinct x and corresponding y

I have a set of records with multiple duplicate values across two fields X, and Y. I would like to write a splunk query to find distinct X, and its corresponding Y value. I am completely lost, and have no clue on how to come up with this query. Can…
rickygrimes
  • 2,637
  • 9
  • 46
  • 69
3
votes
2 answers

Splunk query using "rex" fails with Error in 'SearchParser': Missing a search command before '^' on REST API

New to splunk. This query Runs perfectly fine via the UI: index=serverlogs* WEB_URL=/someurl/* | rex ".*\?(?[^ ]+)" | search GETQUERY=*.jpg | top 20 REFERER I'm trying to apply this to the REST API as such and every rex fails and sends…
DAhmed312
  • 41
  • 1
  • 3
1 2 3
…
99 100