logo_splunk.png

[Splunk] – Basic search fields and commands

For those who are new to Splunk, let’s look at the necessary commands to use in the basic field. Field A field is a very…

Continue Reading...
logo_splunk.png

Splunk Tips and materials

How to start/stop Splunk daemon. Splunk@VM-Splunk:~$ sudo /opt/splunk/bin/splunk start How to check a status of Splunk daemon Splunk@VM-Splunk:~$ sudo /opt/splunk/bin/splunk statussplunkd is running (PID: 2432).splunk…

Continue Reading...
Splunk_extract_field_1.png

Splunk how to extract a field from raw data

This is simple steps to extract a duplicated field from raw data.    1. As you can see below capture, there are same data on…

Continue Reading...
logo_splunk.png

Add data to Splunk

  Add data to Splunk A. Splunk server 1. Click “Add data” 2. Click “A file or directory of files” 3. “Consume any file on…

Continue Reading...
logo_splunk.png

How to install splunk on OpenSuSE 11.x

Tweet I have been testing Splunk window version on my Microsoft Window XP(32bits). Window version was easy to install and control Splunk software. But somehow, I…

Continue Reading...
logo_splunk.png

How to use Splunk with tips

Tweet Yes, it is expensive tool, if you attempt to use it on large network. Yes, it is not easy to use if you are…

Continue Reading...
logo_splunk.png

Troubleshooting example using Splunk – Syslog

Tweet Splunk was configured as a Syslog server on my lab network for few weeks now. Since I modified few parameters on service side and…

Continue Reading...