Blogs

Decoding Splunk Indexes definition

Decoding Indexes.conf Indexes.conf configuration file is used to manage and configure index settings. Use the [default] stanza to define any global settings and [<index>] stanza to define index level settings.

Read More

Decoding Index definitions in Splunk

Indexes.conf configuration file is used to manage and configure index settings. Use the [default] stanza to define any global settings and [<index>] stanza to define index level settings. If a

Read More

More on Lookups

CSV Lookup:   CSV type lookup are file-based lookups that match field values from your events to field values in the static table represented by a CSV file. They output

Read More

Using Lookups in Splunk

We all know, lookups are very useful in enhancing the your original event data. It will add key value pairs to your existing event to make more sense of your

Read More