Splunk dev with bump, refresh, restarts

April 22, 2019•42 words

_bump for “content files” (css/js/appserver), debug/refresh for “config changes/xml/conf” and “splunkweb restart” for persistant handlers. mod input, custom command py files are executed fresh each instantiation after the initial “pick up new things splunkd restart”. conf.spec requires restart

Thanks, alacercogitatus

👍❤️🫶👏👌🤯🤔😂😍😭😢😡😮

Subscribe to the author

You'll only receive email when they publish something new.

More from automine
All posts

Rolling authentication failures by device over 1 minute windows

April 8, 2019•27 words

|tstats summariesonly=true allow_old_summaries=true count from datamodel=Authentication where Authentication.action="failure" by _time Authentication.dest span=1s | rename Authentication.* AS * | streamstats time_window=1m sum(count) AS dest_failures by dest ...

Read post

Data Durability Status and History

May 10, 2019•28 words

index=_internal host=indexer* OR host=cm* ((source=*splunkd.log* my guid) OR (source=*health* due_to_stanza="feature:data_searchable" color=red)) | eval type=case(match(source,"health"),"not searchable",match(source,"splunkd\.log"),"start-up") | timechart span=1m dc(sourcetype) by type Thanks to JonRust on Slack ...

Read post

Splunk dev with bump, refresh, restarts

More from automineAll posts

Rolling authentication failures by device over 1 minute windows

Data Durability Status and History

More from automine
All posts