Category: Splunk

For those who are new to Splunk, let’s look at the necessary commands to use in the basic field. Field A field is a very…

How to start/stop Splunk daemon. Splunk@VM-Splunk:~$ sudo /opt/splunk/bin/splunk start How to check a status of Splunk daemon Splunk@VM-Splunk:~$ sudo /opt/splunk/bin/splunk statussplunkd is running (PID: 2432).splunk…

This is simple steps to extract a duplicated field from raw data.    1. As you can see below capture, there are same data on…

  Add data to Splunk A. Splunk server 1. Click “Add data” 2. Click “A file or directory of files” 3. “Consume any file on…

Tweet I have been testing Splunk window version on my Microsoft Window XP(32bits). Window version was easy to install and control Splunk software. But somehow, I…

Tweet Yes, it is expensive tool, if you attempt to use it on large network. Yes, it is not easy to use if you are…

Tweet Splunk was configured as a Syslog server on my lab network for few weeks now. Since I modified few parameters on service side and…