{"id":1116,"date":"2015-12-14T18:30:18","date_gmt":"2015-12-14T18:30:18","guid":{"rendered":"http:\/\/cdblog.cdstealer.com\/?p=1116"},"modified":"2022-11-12T08:40:35","modified_gmt":"2022-11-12T08:40:35","slug":"useful-splunk-tips","status":"publish","type":"post","link":"https:\/\/cdblog.cdstealer.com\/?p=1116","title":{"rendered":"Useful Splunk Tips"},"content":{"rendered":"

Disable the \"open in search\" function in a dashboard.<\/p>\n

<option\u00a0name=\"link.visible\">false<\/option><\/p><\/blockquote>\n

One shot log ingestion: (super useful!)<\/p>\n

\n

$SPLUNK_HOME\/bin\/splunk add oneshot \"\/path\/to\/file\" -index <index>\u00a0-sourcetype <sourcetype>\u00a0-auth admin:changeme<\/p><\/blockquote>\n<\/blockquote>\n

Remove indexed logs<\/p>\n

splunk cmd btprobe -d $SPLUNK_DB\/fishbucket\/splunk_private_db --file --reset<\/p><\/blockquote>\n

track files being read<\/p>\n

https:\/\/<server>:8089\/services\/admin\/inputstatus\/TailingProcessor%3AFileStatus<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"

Disable the \"open in search\" function in a dashboard. <option\u00a0name=\"link.visible\">false<\/option> One shot log ingestion: (super useful!) $SPLUNK_HOME\/bin\/splunk add oneshot \"\/path\/to\/file\" -index <index>\u00a0-sourcetype <sourcetype>\u00a0-auth admin:changeme Remove indexed logs splunk cmd btprobe -d $SPLUNK_DB\/fishbucket\/splunk_private_db --file --reset track files being read https:\/\/<server>:8089\/services\/admin\/inputstatus\/TailingProcessor%3AFileStatus<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[305],"tags":[215,225],"class_list":["post-1116","post","type-post","status-publish","format-standard","hentry","category-splunk","tag-splunk","tag-xml"],"_links":{"self":[{"href":"https:\/\/cdblog.cdstealer.com\/index.php?rest_route=\/wp\/v2\/posts\/1116","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cdblog.cdstealer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cdblog.cdstealer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cdblog.cdstealer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cdblog.cdstealer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1116"}],"version-history":[{"count":5,"href":"https:\/\/cdblog.cdstealer.com\/index.php?rest_route=\/wp\/v2\/posts\/1116\/revisions"}],"predecessor-version":[{"id":2233,"href":"https:\/\/cdblog.cdstealer.com\/index.php?rest_route=\/wp\/v2\/posts\/1116\/revisions\/2233"}],"wp:attachment":[{"href":"https:\/\/cdblog.cdstealer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1116"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cdblog.cdstealer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1116"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cdblog.cdstealer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1116"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}