https://community.splunk.com/t5/Getting-Data-In/F5-index-not-properly-captured/m-p/46683#M8812 <P>I am not sure if you are referring to a Splunk for F5 Security, but, I am having some problems related to the extractions done by this app. I followed all the steps available on pdf which came with the app (that once named Creating-a-logging-profile-for-Splunk) and I noticed that when a fields is extracted, it is being extracted field_name=value, not just the field's value. It is being a problem to filter data because the website names into the combo boxes are being extracted the same way either. I wonder if there are additional configs to generate event logs which are not part of that available doc.</P> <P>Someone having similar problems, I say, related with extractions done by this app?</P> <P>Thanks for any help.</P> Thu, 02 May 2013 15:33:05 GMT wagnerbianchi 2013-05-02T15:33:05Z https://community.splunk.com/t5/Getting-Data-In/F5-index-not-properly-captured/m-p/46681#M8810 <P>How to check if f5 logs are getting into Splunk properly?</P> Thu, 28 Feb 2013 06:08:26 GMT https://community.splunk.com/t5/Getting-Data-In/F5-index-not-properly-captured/m-p/46681#M8810 WilliamF 2013-02-28T06:08:26Z https://community.splunk.com/t5/Getting-Data-In/F5-index-not-properly-captured/m-p/46682#M8811 <P>what does 'properly' mean? are you seeing the events in the index? have you tried searching for something you know should be in the events, over all time?</P> Wed, 10 Apr 2013 16:26:22 GMT https://community.splunk.com/t5/Getting-Data-In/F5-index-not-properly-captured/m-p/46682#M8811 piebob 2013-04-10T16:26:22Z https://community.splunk.com/t5/Getting-Data-In/F5-index-not-properly-captured/m-p/46683#M8812 <P>I am not sure if you are referring to a Splunk for F5 Security, but, I am having some problems related to the extractions done by this app. I followed all the steps available on pdf which came with the app (that once named Creating-a-logging-profile-for-Splunk) and I noticed that when a fields is extracted, it is being extracted field_name=value, not just the field's value. It is being a problem to filter data because the website names into the combo boxes are being extracted the same way either. I wonder if there are additional configs to generate event logs which are not part of that available doc.</P> <P>Someone having similar problems, I say, related with extractions done by this app?</P> <P>Thanks for any help.</P> Thu, 02 May 2013 15:33:05 GMT https://community.splunk.com/t5/Getting-Data-In/F5-index-not-properly-captured/m-p/46683#M8812 wagnerbianchi 2013-05-02T15:33:05Z