Splunk upgrade: splunk_monitoring_console has overriding copies of...
Hello Splunkers, I just upgraded Splunk from 7.2.5.1 to 7.2.6 on CentOS 7. The migration process gave the following warning: Checking for possible UI view conflicts... App "splunk_monitoring_console"...
View Articlecombining alerts into one daily email report
I want to generate one daily email showing ALL DMC alerts that have been produced in the last 12 or 24 hours, and wondered if it is possible? alerts are generated individually for each of the 8 main...
View ArticleWhy does the search works in Monitoring Console but not in other Apps?
I'm trying to convert the Health Check queries into a dashboard, I already change neccesary permissions in some macros and lookups in order to do this but two of the searches launch this kind of query:...
View Articlecopy search peers from one Splunk monitoring console to another
what would be the best way to copy search peers from one Splunk monitoring console to another. I need to migrate the monitoring console role on to a new server and we have a rather big list of splunks...
View Article"maxHotSpanSecs" doesn't appear in "Index Detail: Instance: Retention...
I added below attribute to index stanza [hogehoge] in indexes.conf: `maxHotSpanSecs = 86400` But I can't see this setting's info on the panel `Retention policies` in `Index Detail: Instance` of...
View ArticleIs there a way to automate the monitoring console health check?
all, Is there a way to automate the monitoring console health check and get the results emailed to me? weekly ?
View ArticleUse Monitoring Console to monitor a Search Head with Enterprise Security
Hi at all, I have the following architecture: - 2 clustered Indexers, - 2 Search Heads, - 1 Master Node, - 1 Deployment Server. My architecture has been correctly running from last year. I leave this...
View ArticleHow to resolve 404 in Distributed Monitoring Console General Setup?
When I enable distributed mode on my cluster master all the indexer nodes are added to the peers list. However, When i try to edit server roles, or Apply Changes I get this error in the...
View ArticleHow to monitor search head cluster from a monitoring console?
Hi, I have a clustered environment where I have 1 indexer master/license master, 1 search head deployer, 3 search heads in search head cluster and 2 indexers in an indexer cluster. I have set up a...
View ArticleCan Splunk pull *the contents* of a lookup created in a search head cluster...
I created a Splunk Health Dashboard for myself on the server that runs my Monitoring Console. The MC server is not part of my search head cluster. My search head cluster updates a lookup every hour...
View ArticleDistributed management console
What is the DMC on splunk? Why should I have need to install it? How should be installed, It is an app? The monitoring console is not the same thing as that? I'm configuring and distributed environment...
View ArticleWhat are the steps to install Monitoring Console on the License Master instance?
We are building the splunk clustered environment for dev environment. We have a License Master setup. We want the Monitoring console to be setup on the same License master instance. Please let me know...
View ArticleDMC Indexer Performance - Queue information is missing
I've taken over managing two Splunk environments a while back, one in a Test environment and another in a Prod environment. Was looking through the DMC in Indexer Performance and noticed that the...
View ArticleRun MC Health Checks on scheduled basis and email results?
Is there an easy/supported way to have the `health checks` on the `Monitoring Console` be run on a schedule and create alerts of any kind (e.g. email) so that it can be automatic?
View ArticleNew "role" cannot be added to any users due to "is not grantable"; how to...
I am adding a new role to allow analysts to access the `Monitoring Console`. I believe that the minimum set of `capabilities` for this to be these: [role_moncon_user] # ==== Capabilities ====...
View ArticleCan some one explain what are aggregation issues?
we on-boarded an application recently, Now we are seeing there are 100K aggregation issues(Log level= WARN) and 30k timestamp issues(Log Level=WARN) yesterday from one source, we are monitoring that...
View ArticleHow can I extend the historic performance data in the monitoring console?
Hi, I am running a small cluster (2*I, 1SH, 1DS) and when I use the monitorig console on the deployment server it happily shows me indexing information for 60 days. But I only see 8 days of CPU/memory...
View ArticleMonitoring Console shows inconsistent max memory on Indexer
Hi, on a 7.2.4 Cluster my Indexers show memory usage of more than 80% in the initial screen of the monitoring console. When I then go into the *Resource Usage: Machine* screen, I see that Splunk knows...
View ArticleNo data found in Monitoring console of my standalone splunk enterprise after...
Hi Team, I have upgraded my splunk standalone enterprise (indexer) from 6.4.1 to 7.0.0. i am not able to see data in my MC. Also in resource usage tab under Machine information the instance i see is...
View ArticleMonitoring console not visible on standalone search head.
Hi, I have a weird problem, I have a standalone search head but Monitoring console is not available. This standalone SH was earlier part of the SH cluster - which is now broken due to some other...
View Article
