Getting Data In

Splunk_TA_esxilogs - Why Verbose and Trivia Log are set to NullQueues in transforms.conf

mel_arce
Engager

Hi Splunk Support Team,

  We have utilized the vmware app add-on Splunkbase Splunk_TA_esxilogs and just want to understand the reason behind why verbose/trivia logs are set to NullQueues in transforms.conf, is this a default configuration for this TA? What is the possible risk if these logs won't put to NullQueues. 

#NullQueues
[vmware_generic_level_null]
DEST_KEY = queue
FORMAT = nullQueue
REGEX = (?:verbose|trivia)[:\s]

[vmware_generic_level_null_4x]
DEST_KEY = queue
FORMAT = nullQueue
REGEX = ^\w+\s+\d+\s+[\d:]{8}\s+[^ ]+\s+\w+\s+\d+\s+[\d:]{8}\s.(?:verbose|trivia).

Tags (1)
0 Karma

mel_arce
Engager

Hi,

Much appreciated if someone from Splunk SME or from TA developer provide inputs on the previous query regarding verbose/trivia nullqueue in Splunk TA exsilogs add on for apps for vmware. Thank you!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...