Getting Data In

Community Activity

newbie question on timeline extraction Pls excuse me if this is a really silly question. I cannot find an easy answer in the kb. I have a file which I'm try... by timcoote New Member in Getting Data In 05-11-2011 0 1	0	1
Help removing the Windows App I installed the Windows App for Windows management and let it include recommended data inputs but now want to disable... by wbordeau Explorer in Getting Data In 05-10-2011 0 2	0	2
can't receive events from fowarders Hello, I have a brand new install of a splunk indexer and several clients running forwarders. To install the client... by dbutch1976 Explorer in Getting Data In 05-10-2011 0 6	0	6
Blacklist problem I'm using the universal forwarder on Solaris. I set up the following input: [monitor:///var/log] disabled = false ... by mjmcleod New Member in Getting Data In 05-09-2011 0 2	0	2
Windows app on LInux Indexer Hi, The following is my setup. Indexer is running on Linux, and App "Splunk for Windows" installed on it. Univers... by jameszh New Member in Getting Data In 05-09-2011 0 8	0	8
Are Wildcards supported for use with UNC Paths? I am trying to index a UNC Path, but am unable to use wildcards.. Here's what I"m trying to match \\IISLOGS\MYSERV... by richnavis Contributor in Getting Data In 05-09-2011 0 9	0	9
Windows Universal Forwarder - "received event for unconfigured/disabled index" warning message I'm trying to configure the Splunk Unviersal forwader on a windows box to forward windows event log messages to my sp... by jstockamp Communicator in Getting Data In 05-09-2011 0 2	0	2
Why is Host "localhost" when inputs.conf set-up to use custom name? Hi all, I'm using a straight forward splunk install (no forwarder, no external input source) on my server. Below is ... by tbertran New Member in Getting Data In 05-09-2011 0 5	0	5
How can I forward all "Splunk Deployment Monitor App" to another Splunk I wondering if you could help me with an issue… Here in mine company we installed different servers to each different... by mamaral Path Finder in Getting Data In 05-09-2011 1 3	1	3
Difference between 'show default-hostname' and 'show servername' When running these two commands on a host I get different values. What (if any) is the difference between the two? ... by nocostk Communicator in Getting Data In 05-09-2011 1 1	1	1
Overriding timezone in props.conf Hi, I'm trying to get Splunk to recognise my timezone based on a TZ and TIME_PREFIX setting in props.conf. However,... by howyagoin Contributor in Getting Data In 05-08-2011 0 2	0	2
should the data be indexed include timestamp e.g. if the data be indexed is an application log, all the messages logged in this log file should contain a timestam... by amywong New Member in Getting Data In 05-08-2011 0 2	0	2
is it possible to set up a scripted input that does its own sleeps and never exits? There's a scripted input that I wanted to create a while ago, but it had to do some 'setup' stuff at the beginning a... by sideview SplunkTrust in Getting Data In 05-07-2011 0 2	0	2
Splunking Postgres log events WITHOUT a timestamp Currently, my postgres log events do not contain a timestamp, which makes it difficult for splunking, especially hist... by maverick Splunk Employee in Getting Data In 05-06-2011 0 1	0	1
windows forwarder unable to add application,system and security event logs? Hi, I've a forwarder(v4.1.3) installed on a W2K DC and has been configured to forward Application,System and securit... by remy06 Contributor in Getting Data In 05-06-2011 1 7	1	7
Index a DB-log Hello all, Just wondering if some of you have already indexed some logs which are stored in a DB and if so, what wou... by OL Communicator in Getting Data In 05-06-2011 1 2	1	2
Splunk throws error message when data input tar.gz file contains Simplified Chinese characters(GB2312): Input is not proper UTF-8, indicate encoding! Splunk throws error message when data input tar.gz file contains Simplified Chinese characters(GB2312): Input is not ... by rsimmons Splunk Employee in Getting Data In 05-05-2011 1 1	1	1
Does batch input ignore files already read? I have a file in a folder that is being monitored by Splunk. Its contents have been indexed. If I move that file into... by Jason Motivator in Getting Data In 05-05-2011 5 2	5	2
unable to create centralized splunk server i am using fc9 webservers my server pool 192.168.0.0/24 i crated one splunk centralized server i integrated all clien... by digitmon New Member in Getting Data In 05-05-2011 0 3	0	3
universalforwarder 4.2.1 unable to connect to index server 4.2.1 with sslv3 have enabled SSLv3 on splunk 4.2.1 index server and universalforwarder 4.2.1, universalforwarder doesn't seem to be a... by deyeo Path Finder in Getting Data In 05-05-2011 0 3	0	3
How to monitor http web pages and splunk the results? Hello I'm looking to set something up that calls a bunch of http webpages that run on some of our boxes that need a ... by Hazel Communicator in Getting Data In 05-05-2011 1 1	1	1
Monitoring timestamp rotation log files Hi, I am not sure if out of box solution there for log rotation, when you are adding the file or directory. We are u... by sumitnagal Path Finder in Getting Data In 05-04-2011 0 5	0	5
Scheduling csv view/dashboard delivery Hello, i want to schedule email export csv for the view/dashboard like the pdf server : I know do it for search but... by willow75 Explorer in Getting Data In 05-04-2011 0 4	0	4
Re-index after changing props.conf? Yesterday afternoon I updated a number of files which had missing data in them in a directory which Splunk's tailing ... by howyagoin Contributor in Getting Data In 05-04-2011 0 3	0	3
snare Sourcetype Hi all, i'm running splunk 4.2.1 i need to take windows log by snare agent. When i create a data input and select so... by zagor New Member in Getting Data In 05-04-2011 0 2	0	2