Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Community Activity
 | I have been trying with the below query to capture the failed login attempts made on the windows servers. source="Wi... by npandith Explorer in Getting Data In 03-28-2011 0 1 | 0 | 1 | |
| | Hey All, I enabled the squid app for splunk and threw a log file into it. Pretty quick and easy, and I whipped out ... by jgauthier Contributor in Getting Data In 03-28-2011 1 4 | 1 | 4 | |
 | EDIT: I've discovered this only happens if I specify more than one stanza on the same port -- different remote IPs, s... by twinspop Influencer in Getting Data In 03-27-2011 0 3 | 0 | 3 | |
| | I'm trying to create a search to determine which hosts in a CSV file don't have any events associated with it within ... by zschmid Path Finder in Getting Data In 03-27-2011 2 4 | 2 | 4 | |
| | Has anyone setup the windows "netstat" command as an input? I like the "netstat" source provided in the unix app, an... by Lowell Super Champion in Getting Data In 03-26-2011 1 3 | 1 | 3 | |
| | We performed renames on several servers and am seeing them all show with a weird issue. It seems that there are still... by dchristilaw New Member in Getting Data In 03-26-2011 0 1 | 0 | 1 | |
| | I have set up a few heavy forwarders. I did this to filter data, and learn how. Some of these are on a WAN and will... by jgauthier Contributor in Getting Data In 03-26-2011 1 6 | 1 | 6 | |
| | Can I use the universal forwarder 4.2 to send data to an indexer running Splunk 4.1.7 (or older) ? by rasingh Path Finder in Getting Data In 03-25-2011 1 1 | 1 | 1 | |
| | Hi, is it possible to use different indexes on the main splunk server which received the data from windows forwarde... by krusty Contributor in Getting Data In 03-25-2011 1 8 | 1 | 8 | |
| | I have a handful of different sourcetypes that all get written to log files in /var/log/app. I also have more than o... by tpsplunk Communicator in Getting Data In 03-24-2011 3 13 | 3 | 13 | |
| | I have the following stanza in transforms.conf: [medusa_media_access-drop-events] REGEX = ^\S+\s++\S+\s++\[[^\]]*\]\... by spock_yh Path Finder in Getting Data In 03-24-2011 0 2 | 0 | 2 | |
| | I'm having a heck of a time figuring out the best way to get splunk to show these multiline events in one event. Any ... by michaelhobbs Explorer in Getting Data In 03-24-2011 1 7 | 1 | 7 | |
 | I have DNS log lines that look like the following: (4)mail(6)google(3)com(0) (7)twitter(3)com(0) (12)spreadsheets(1)... by the_wolverine Champion in Getting Data In 03-24-2011 0 5 | 0 | 5 | |
| | Hi , I have below configuration in inputs .conf [monitor:C:\Program Files\Splunk\etc\apps\sampleApp\samplelogs] I h... by spatil Path Finder in Getting Data In 03-24-2011 0 1 | 0 | 1 | |
| | Hi, as we know , before splunk eat a compressed file, splunk will decompress it first then index it. but, if we ha... by dmlee Communicator in Getting Data In 03-24-2011 1 2 | 1 | 2 | |
| | I have a Splunk 4.1.7, build 95063 instance and am trying to pull logs from Informix DB on Solaris 10. So I had set t... by splunktp Explorer in Getting Data In 03-24-2011 0 1 | 0 | 1 | |
| | Totally new with Splunk. Have mercy on my soul! I am trying to set up Splunk on my laptop as I am awaiting licens... by Rayj00 New Member in Getting Data In 03-23-2011 0 2 | 0 | 2 | |
| | Is a Splunk Agent the same as a Splunk Forwarder? Thanks, Ray by rayjsplunk New Member in Getting Data In 03-23-2011 0 3 | 0 | 3 | |
| | I tried out the option "source name override" when setting up a UDP data input to replace "UDP:514" with "mynetworkSy... by Mr_Robaloba Explorer in Getting Data In 03-23-2011 1 3 | 1 | 3 | |
| | I am trying to filter a log file coming in via a universal forwarder (both installs are 4.2) so that messages contain... by Mr_Robaloba Explorer in Getting Data In 03-23-2011 0 2 | 0 | 2 | |
 | I have a simple setup. A light forwarder, forwarder and an indexer. The light forwarder stopped working about 5 day... by DTERM Contributor in Getting Data In 03-23-2011 0 3 | 0 | 3 | |
| | Hi Splunkers, We have a macro here we're using to allow users to search their previous search history. It relies on ... by ickymettle Explorer in Getting Data In 03-23-2011 1 1 | 1 | 1 | |
| | I have about 50 forwarders in my environment. Somewhere I have screwed up, and included the same set of host data tw... by seanlon11 Path Finder in Getting Data In 03-22-2011 0 1 | 0 | 1 | |
| | We just updated to 4.2 on our splunk server, and I am in the midst of pushing the Universal Forwarder out to replace ... by bkaspar Engager in Getting Data In 03-21-2011 1 2 | 1 | 2 | |
| | Is it necessary to use si* command for summary index and we need to make it as scheduled save? Since I recall the sa... by hochit Path Finder in Getting Data In 03-21-2011 2 2 | 2 | 2 |
Upcoming Events
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Top Labels
-
administration
14 -
blacklist
92 -
configuration
35 -
CSV
210 -
data
508 -
deployer
1 -
development
6 -
field extraction
565 -
forwarder management
2 -
heavy forwarder
970 -
host
160 -
HTTP Event Collector
446 -
index
546 -
indexer
720 -
indexer clustering
1 -
inputs.conf
846 -
installation
6 -
intermediate forwarder
147 -
JSON
396 -
Linux
464 -
Mac
30 -
modular input
196 -
monitor
314 -
other
86 -
Platform
1 -
props.conf
998 -
saved search
2 -
scripted input
250 -
search
1 -
search head
2 -
search head clustering
1 -
source
292 -
sourcetype
497 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
syslog
325 -
time
205 -
transforms.conf
586 -
troubleshooting
15 -
universal forwarder
1,583 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
16 -
whitelist
60 -
Windows
600 -
XML
91
- « Previous
- Next »
Get Updates on the Splunk Community!
Splunk Auto Ingestion Parallel Pipeline Scaling
Why this feature matters
Many Splunk environments experience ingestion pressure long before the host is fully ...
Best Practices: Splunk auto adjust pipeline queue
When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...
Announcing Modern Navigation: A New Era of Splunk User Experience
We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...
Unanswered Topics
