Getting Data In

Community Activity

Note about how HEC events are parsed based on the Endpoint configured Hello, a quick note from support to explain how events are handled on HEC (on HF for instance) :https://help.splunk.c... by splunkreal Influencer in Getting Data In yesterday 2 9	2	9
Ingest Processor doesn't route logs where I want I am fairly new to Splunk. I am trying to reduce ingestion size of logs that are coming from the Palo Alto Cloud conn... by derekmkll Engager in Getting Data In Thursday 1 1	1	1
Splunk HEC/kafka raw logs parsing / addons Hello, is it possible in Splunk HEC from Kafka to receive raw events on HF in order to parse fields with addons?It se... by splunkreal Influencer in Getting Data In Thursday 0 5	0	5
How to onboard the logs from windows to Splunk without UF Hi all,I want to onboard my windows Security logs in to splunk with out installing UF is there any other way with out... by _Raj Path Finder in Getting Data In Wednesday 1 5	1	5
Need Guidance on OCI Log Integration with Splunk On-Premises (HEC Connectivity Issue) Hi Team,We are trying to integrate Oracle Cloud Infrastructure (OCI) logs with our Splunk Enterprise On-Premises envi... by Thirugangt Engager in Getting Data In a week ago 0 3	0	3
How can I force a full daily import from ServiceNow instead of using checkpoints? I'm looking for a way to perform a full import of data from ServiceNow every day.Currently, I'm using the Splunk Add-... by renie New Member in Getting Data In a week ago 0 2	0	2
How can I configure Splunk Forwarder to NOT index historical WinEvents? I intend to install Splunk as a forwarder on my Windows boxes, but I only want Splunk to monitor for the very latest,... by maverick Splunk Employee in Getting Data In 2 weeks ago 4 6	4	6
How to integration Microsoft Exchange on Splunk Without installing UF on Exchange Host? How to integrate Microsoft Exchange on Splunk without installing a universal forwarder that hon the Exchange Server ... by AceX Path Finder in Getting Data In 2 weeks ago 1 11	1	11
Splunk Cloud ----> "Forwarding and receiving" option Splunk Cloud---> It doesn't look like Splunk Cloud have the "Forwarding and receiving" (Setting---->Data----->Forward... by cdCryptoMetrics Engager in Getting Data In 2 weeks ago 0 5	0	5
How do I go about the integration with Global Relay? One of our clients is asking for a fresh integration with Global Relay as a replacement for ZL Archive, how do I go a... by spl_aficionado Path Finder in Getting Data In 2 weeks ago 0 3	0	3
How to connect Splunk API with Trend Micro Apex One aaS? Hello!I try onboarding several Trend Micro Cloud Applications like Apex One as a Service but it just doesn't work. On... by avoelk Communicator in Getting Data In 2 weeks ago 0 1	0	1
ClamAV 'Last Scanned' and 'Definition Date' not populating Good morning everyone, first time poster and very much a novice Splunk user.My colleague is currently having an issue... by jcanoy24 New Member in Getting Data In 2 weeks ago 0 3	0	3
Splunk Add-on for Infoblox compatibility with Splunk & ES version 10 https://splunkbase.splunk.com/app/2934 is it compatible with Splunk enterprise & ES 10.0.4 even though it's archived.... by USA69 Engager in Getting Data In 2 weeks ago 0 7	0	7
HTTPOUT from an old Heavy Forwarder Hi all,I'd like to convert an existing, on prem, heavy forwarder to send it's data to a Cloud instance of Splunk usin... by e_v_m Observer in Getting Data In 3 weeks ago 0 6	0	6
Splunk UF is not connecting with Deployment Server Hii everyone,I have installed Splunk uf 10.0.5 on windows server 2016. The UF needs to connected to DS whose version ... by ankit13 Loves-to-Learn Lots in Getting Data In 3 weeks ago 0 9	0	9
Add input Function to the Databricks App It would be great if you could extend the app with an input function. This would allow us to continuously retrieve da... by Josef Engager in Getting Data In 3 weeks ago 0 1	0	1
Heavy Forwarder queue saturation for sending logs to Universal Forwarders Hello, I recently had to deploy a Heavy Forwarder in my infrastructure in order to perform transformations using a cu... by jeremieQuiviger New Member in Getting Data In 3 weeks ago 0 3	0	3
How to trigger detection of new files, folders, or edited Excel files in a directory monitored by Universal Forwarder? Hi community, I am using a Splunk Universal Forwarder (UF) to monitor a specific directory on our server. I need to a... by sonaralt Engager in Getting Data In 3 weeks ago 0 18	0	18
Can forwarder quickly reconnect after a network outage? Forwarder applies backoff setting (default 300 sec) based on following default settings ####### # Backoff Settings Wh... by hrawat Splunk Employee in Getting Data In 4 weeks ago 2 2	2	2
Heavy Forwarder License I have 2 heavy forwarder on-prem and one of the HF says license is expired. I don't have a LM. I have a hybrid syste... by 709_miner Loves-to-Learn Everything in Getting Data In 4 weeks ago 0 3	0	3
Cisco Security Cloud Estreamer Issues Good Afternoon,I have been at war with the estreamer app for 2 weeks and I can not get this to work. Below is the cur... by Rafaelled Explorer in Getting Data In a month ago 1 2	1	2
MS Exchange Server integration: Version 2022 Hi,I want to integrate MS Exchange Server : Version 2022 using the below TA-Addon:Splunk Add-on for Microsoft Exchang... by 0xAli Path Finder in Getting Data In a month ago 0 2	0	2
CiscoSecurityCloud TA 3.6.7 -eStreamer ingestion falling behind by several hours under high log volume from a single FMC We are using the CiscoSecurityCloud TA 3.6.7 to ingest firewall events via eStreamer from a single FMC that has 5 fir... by refahiati Explorer in Getting Data In a month ago 0 0	0	0
Sophos xg firewall logs not parsed completely Hi Everyone, We have successfully integrated a Sophos XG Firewall with Splunk using Splunk Connect for Syslog (SC4S).... by ankit13 Loves-to-Learn Lots in Getting Data In a month ago 0 2	0	2
10.2.4- Search Head unable to connect to Indexers After upgrading our distributed environment to 10.2.x (multi-site indexer cluster, RHEL 8), the Search Head suddenly ... by neelamsantosh Path Finder in Getting Data In 06-17-2026 4 1	4	1