The dojo of Splunk. Learn, share, teach, mentor.
-
James Fitzell
- NSW
- Australia
- Share
- Share on Twitter
- Share on Facebook
- Blog Posts
- Discussions (3)
- Events
- Groups
- Videos
James Fitzell's Discussions
AutoHeader and field extraction
3 Replies
I've spent some period of time trying to get Splunk to index our proxy logs and while I've made progress I'm still having some problems.My issues all revolve around field extraction, I was unable to…
Started this discussion. Last reply by Michael Wilde Feb 11.
James Fitzell's Page
Gifts Received
James Fitzell has not received any gifts yet
Latest Activity
Got a sample I can monkey with?
I've resolved the failing to import issue. It was the crcSalt= setting, I just wasn't using it properly (I thought source was meant to be replaced by the source, rather than literally typing in ).
Still no luck with the headers, they're all still b…
I'm also having terrible trouble getting Splunk to automatically import my logs.
The log files are being sent by FTP to a local directory on the Splunk server. Splunk shows me the correct number of files in the Manager - Data Inputs - Files and Dir…
I've spent some period of time trying to get Splunk to index our proxy logs and while I've made progress I'm still having some problems.My issues all revolve around field extraction, I was unable to use the "extract fields" option within the GUI bec…
Profile Information
- Are you an existing splunk user?
- Free
- What do you do for your day job?
- Network Security
Comment Wall
- No comments yet!
About
Latest Splunk Community Postings
Latest Splunk Forum Posts
Events
© 2010 Created by Michael Wilde on Ning. Create a Ning Network!
