Demonstration of how to cope with rolling log files in Splunk

Mar 24, 2022, 9:00 – 10:00 PM (UTC)

Fort Worth Splunk User Group

Organizations may implement the rolling of log files on a periodic basis in Splunk. This could be daily, weekly or any frequency.

About this event

Organizations may implement the rolling of log files on a periodic basis. This could be daily, weekly or any frequency. One scenario that can happen is where Splunk does not realize that the rolled log file has new data and does not ingest as desired. It could be a file with the same name or even a separate file. This demo session is a walkthrough of how to troubleshoot ingestion issues and how to calculate and apply the necessary configuration settings to get Splunk rocking and [log] rolling again.

Speakers

  • Krishnateja Thammireddygari

    BitsIO

    Sr Principal Consultant

  • Aleem Cummins

    bitsIO Inc.

    VP at bitsIO Inc, Community Servant, SplunkTrust MVP and Positive Enabler

Organizer

  • Suman Gajavelly

    bitsIO

    Co-Leader

Contact Us