Why does our Monitoring Console (Resource Usage: Instance) disk capacity does...
One of the Splunk partitions had its volume disk capacity increased, but in the monitoring console, it keeps showing the old disk capacity value. Is there any file or configuration that needs to be...
View ArticleUnknown Memory & CPU Status Search Head Detected on Monitoring Console ( Disk...
Monitoring console : On the monitoring console, two search heads were not reporting CPU/Memory statistics. It's showing the status as grey. The indexers were reporting all the stats correctly. We tried...
View ArticleCan I Add selected heavy forwrders in splunk monitoring console in forwarder...
HI, I want to be able to add only a few selected heavy forwarders in my distributed monitoring console. so basically I want to use wildcard (or may be a text file with list of forwarders or something...
View ArticleFEATURE REQUEST: Splunk Cloud View of Licensed Daily Volume / License Stack /...
Today I can only see usage in the "Splunk Cloud Monitoring Console", however not what my daily limit/license stack is. This information is missing in Splunk Cloud whereas it's readily available in...
View ArticleMonitoring Console Health Check does not run
I'm trying to run Monitoring Console Health Check but it doesn't start. Splunk shows me only "Loading..." page. The checklist.conf file is ok in default directory. I'm running the brand new version...
View ArticleHow to find out who is using the most ressources in a clustered environment...
Dear all, We're starting to suffer from our user where our clustered architecture is collapsing under the heavy load of searches that prevent our indexers to index. O_o Using Splunk Enterprise 7.0.5 we...
View ArticleEvent-processing issues check in monitoring console consistently displays...
When running the health check for the monitoring console I am consistently receiving event-processing issues (date_parsing_issues) I have added a stanza to /opt/splunk/etc/system/local for the...
View ArticleHow to disable monitoring console using command line.
Hi, We have enabled distributed mode monitoring console on one of the splunk servers, how can I disable monitoring console on all other splunk servers via command line.
View ArticleMonitoring Console continues to display old SH Cluster member. Is there a way...
Hi, We have a Search Head Cluster with 3 members. Originally when the cluster was setup there was a 4th member that was eventually removed and turned into a Stand-alone SH. If we check the...
View ArticleIs there a way to add a custom Server Role in Monitoring Console?
Hi, Does anyone know a way to add a custom Server role in monitoring console? We have a staging instance which we use only for deploying/configuring apps before they are moved to Deployer. Existing...
View ArticleSplunk upgrade: splunk_monitoring_console has overriding copies of...
Hello Splunkers, I just upgraded Splunk from 7.2.5.1 to 7.2.6 on CentOS 7. The migration process gave the following warning: Checking for possible UI view conflicts... App "splunk_monitoring_console"...
View Articlecombining alerts into one daily email report
I want to generate one daily email showing ALL DMC alerts that have been produced in the last 12 or 24 hours, and wondered if it is possible? alerts are generated individually for each of the 8 main...
View ArticleWhy does the search works in Monitoring Console but not in other Apps?
I'm trying to convert the Health Check queries into a dashboard, I already change neccesary permissions in some macros and lookups in order to do this but two of the searches launch this kind of query:...
View Articlecopy search peers from one Splunk monitoring console to another
what would be the best way to copy search peers from one Splunk monitoring console to another. I need to migrate the monitoring console role on to a new server and we have a rather big list of splunks...
View Article"maxHotSpanSecs" doesn't appear in "Index Detail: Instance: Retention...
I added below attribute to index stanza [hogehoge] in indexes.conf: `maxHotSpanSecs = 86400` But I can't see this setting's info on the panel `Retention policies` in `Index Detail: Instance` of...
View ArticleIs there a way to automate the monitoring console health check?
all, Is there a way to automate the monitoring console health check and get the results emailed to me? weekly ?
View ArticleUse Monitoring Console to monitor a Search Head with Enterprise Security
Hi at all, I have the following architecture: - 2 clustered Indexers, - 2 Search Heads, - 1 Master Node, - 1 Deployment Server. My architecture has been correctly running from last year. I leave this...
View ArticleHow to resolve 404 in Distributed Monitoring Console General Setup?
When I enable distributed mode on my cluster master all the indexer nodes are added to the peers list. However, When i try to edit server roles, or Apply Changes I get this error in the...
View ArticleHow to monitor search head cluster from a monitoring console?
Hi, I have a clustered environment where I have 1 indexer master/license master, 1 search head deployer, 3 search heads in search head cluster and 2 indexers in an indexer cluster. I have set up a...
View ArticleCan Splunk pull *the contents* of a lookup created in a search head cluster...
I created a Splunk Health Dashboard for myself on the server that runs my Monitoring Console. The MC server is not part of my search head cluster. My search head cluster updates a lookup every hour...
View Article
