splunk

What commercial and open source competitors are there to Splunk?

It's difficult to find any. Please, no answers like scp + perl + duct tape. I need a complete solution. ...

Tool for parsing smtp logs that finds bounces

Our web application sends e-mails. We have lots of users, and we get lots of bounces. For example, user changes company and his company e-mail is no longer valid. To find bounces, I parse smtp log file with log parser. Some bounces are great, like 550+#[email protected]. There is [email protected] in bounce. But som...

rails application passenger possible errors

I have installed splunk to retrieve information from my log files and elert me when specific keyword is found. Is there any way to get possible rails errors so that I can put those as keywords?? ...

Notify upon any serious errors on logs

Sometimes there are severe bugs (new or reintroduced) in productions that go on for days and weeks, and customers do not always notify us. The only tool I have now is grep, awk & perl but I am just being reactive once someone complains. I want to be proactive and be notified when a certain error has occured for certain number of times i...

building splunk 4.0 "apps" - got feedback?

I'm considering building an app to plug into Splunk 4 to do custom data collection, custom, reporting, etc. (like I see other splunk apps doing) but focused on .NET and J2EE web apps. I'm looking for hints, tips, best practices, etc. to give me a leg up beyond what I can find in the splunk documentation. Anyone have a good list of lin...

help with making a multiple from search bring back data in SPLUNK

i cant seem to get splunk to coorporate with me, ive formed the xml but can't seem to get any search results, here is the xml code <form> <label>My Search Engine</label> <searchTemplate>"$SearchHere$" | head 250</searchTemplate> <earliestTime>-30d</earliestTime> <latestTime>-0d</latestTime> <html> Enter a sourcetype in the field ...

What is the best components stack for building distributed log aggregator (like Splunk)?

I'm trying to find the best components I could use to build something similar to Splunk in order to aggregate logs from a big number of servers in computing grid. Also it should be distributed because I have gigs of logs everyday and no single machine will be able to store logs. I'm particularly interested in something that will work wi...

splunk fields question

im doing a user name search and i want two of the fields in my results table to be the time the user started the connection and also when they disconnected the session to the network. What is this information classified as, and what field would it be called? connect/ disconnect field.... thanks happy splunking blake ...

Shell Scripting and Intersystems Cache: Extracting Information?

I would like to be able to execute a script to draw out the current cache process information. Has anybody done much scripting with cache? Is there an easier way to basically log the process information? The end result of this is I would like to present this information in a way that I could log it into Splunk ...

your challenges with using splunk

Hi all, In our application, we log critical information to log text files for later debugging purpose. With splunk its easy to identify a problem if I already have some data points like order number or "object reference not found" type of error. But its challending for me to get an overall picture of a problem using splunk. To be able t...