Blogs: Splunk 2.x

Greetings friends.. the Curse of the Golden Logfile has been lifted and the Splunk Ninja is back at last!…In this episode the SplunkNinja will demonstrate the simplicity setting up Splunk-2-Splunk. Follow along and the SplunkNinja will guide you through a complete setup.. This 5 minute video is a good primer for anyone who needs Splunk to forward events to a master Splunk server in real time!

Full Quality – Quicktime (MOV) format – 18MB

Video Podcast Quality (M4V) MPEG-4 format – 10MB

Please comment if you’d like to see different videos. The SplunkNinja will gladly all you to watch him destroy any IT data problem for you!

Greetings Grasshoppers.. The Splunk Ninja is back with a double-shot this week. Two videos in three days. In this episode the SplunkNinja will demonstrate the simplicity of making Splunk work. He’ll download, install, configure and have Splunk eating logs in less that three minutes. This 8 minute video is a good primer for anyone who might want to see how Splunk really works!

Full Quality – Quicktime (MOV) format – 60MB

Video Podcast Quality (M4V) MPEG-4 format – 50MB

Please comment if you’d like to see different videos. The SplunkNinja will gladly all you to watch him destroy any IT data problem for you!

I’ve had to field a few of these requests so here goes.

Assuming you understand that by doing this, you send users and passwords in clear text and the risks involved.

There is a way to do this through http GET, but it requires modifying a bit of python.

Edit line 395 of XMLResourse.py located in $SPLUNK_HOME/lib/python2.4/site-packages/splunk/search/XMLResource.py

def render_GET(self, request) :
# backdoor so scripts can auto-login just with a GET request instead of having to craft a proper HTTP POST. Doesnt help said script keep track of the cookie, which is the hard part.
#if (”usr” in request.args) and (”pwd” in request.args) :
# return self.render_POST(request)
logger.debug(”LoginResource.render_GET”)
sessNS = request.getSession().sessionNamespaces

Uncomment out the if and return lines and restart splunk.

To log in, you would enter this URL

http://your.host/login?usr=username&pwd=password

by Mark…