followTail attribute in Splunk This post covers some special cases/scenarios in which the attribute ‘followTail’ may come handy. followTail: An attribute which makes splunk ignore
Day: September 29, 2018
Difference between STREAMSTATS and EVENTSTATS command in Splunk
Difference between STREAMSTATS and EVENTSTATS commands in Splunk Hi everyone !! Here we have come with an interesting topic related to the SPL command. Sometimes
Re-index your data into Splunk
Re-index your data into Splunk Sometimes, due to some unavoidable reasons data loss may occur while indexing or partial indexing may take place, then you