Getting Data In

Community Activity

	How to set a source_type for CSV with headers? Hi, I'm trying to set a source_type for CSV files that contains headers, and the fields are extracted fine.The proble... by Flower Loves-to-Learn Lots in Getting Data In 06-15-2023 0 0	0	0
	How to achieve SEDCMD raw event size reduction? Hello community, I am having an issue creating appropriate SEDCMD to reduce the size of specific Win events. I am try... by DanAlexander Communicator in Getting Data In 06-15-2023 0 16	0	16
	How to create custom source type to add metadata fields to each row and parse an array? Hi,following ticket: https://community.splunk.com/t5/Splunk-Search/Join-all-objects-with-specific-object-within-the-s... by maayan Path Finder in Getting Data In 06-15-2023 0 0	0	0
	How to filter WinEventLog using SEDCMD? Hello, community, I need help reducing Events containing 4688 and ParentProcessName=*splunkd.exe There is an excerpt ... by DanAlexander Communicator in Getting Data In 06-14-2023 0 3	0	3
	How to search for blocked dns/urls in my logs? I have created a lookup table for the blocked dns/url. I want to see if there are anywhere in my logs or in my enviro... by waJesu Path Finder in Getting Data In 06-14-2023 0 3	0	3
	JSON data search stats count(field) by (field) result 5x count from single event Greetings expertsBig picture: using Bash script and curl to download Rest API/JSON from an AWS instance. The beginni... by Seawheels51 Path Finder in Getting Data In 06-14-2023 0 0	0	0
	WinEventLog sourcetype do not match when applied in SEDCMD Hello, community,I am having a problem understanding why the WinEventLog sourcetype cannot be accepted as other sourc... by DanAlexander Communicator in Getting Data In 06-14-2023 0 7	0	7
	How to achieve lookup multiple field but append the missing value? How do I perform lookup multiple field but append the missing value. ThanksFor example:Table A:Name Role ... by LearningGuy Motivator in Getting Data In 06-14-2023 0 7	0	7
	Why is Splunk OneShot not working? Hi all, Having a strange issue. splunk add oneshot suddenly stops working. I have tried to re-read a file using splu... by sini Explorer in Getting Data In 06-14-2023 0 1	0	1
	How to test a linux forwarder connection to deployment server? Hello, I've completed the following: 1. Installed Linux forwarder. 2. Assigned ownership and permissions to splunk u... by Lwoods Path Finder in Getting Data In 06-14-2023 0 1	0	1
	Help with SEDCMD Regex SPL for testing purposes Hello clever people, Would anyone be able to help me build a regex that would work on a SPL level e.g something like ... by DanAlexander Communicator in Getting Data In 06-13-2023 0 11	0	11
	How do I resolve universal forwarder issue with TCP connection (can telnet to 8089 and 9997 though from host)? Hello! Been using the universal forwarder for years connecting to a heavy forwarder currently forwarding to splunk cl... by ericzabowski Engager in Getting Data In 06-13-2023 0 1	0	1
	Why did universal forwarder stop forwarding data? Hi Community, We have installed Universal forwarder on windows 2019 server and were able to get the data into Splunk.... by Eshwar Engager in Getting Data In 06-13-2023 0 4	0	4
	What is causing json messages to not always be indexed? Hi everyone, For one of our client we are sending in json log data via log4j2 to the splunk cloud HEC token. we are u... by dhuynh Loves-to-Learn Everything in Getting Data In 06-13-2023 0 2	0	2
	FortiAnalyzer log interpretation problem Hi,I am completely new to Splunk and I'm forwarding directly from FortiAnalyzer to Splunk on TCP1514. I have configur... by Jambo Loves-to-Learn in Getting Data In 06-13-2023 0 0	0	0
	How to streamline getting Sterling File Gateway data into Splunk more directly? We are currently using SFG to transfer files, sending fie movement and info data to DB tables, and then using Splunk ... by tilburn Observer in Getting Data In 06-13-2023 0 2	0	2
	Why are JSON events coming in as duplicates after using the spath command? I'm using a bash script to call Cisco ESA API and I get the following JSON events. sourcetype="cisco:esa:api:by:... by haoban Path Finder in Getting Data In 06-12-2023 0 3	0	3
	How to index file with multiline events and intermittently occurring timestamps? I have a particularly challenging log format and would appreciate any inputs on how to tackle this problem. Problem L... by zapping575 Communicator in Getting Data In 06-12-2023 0 4	0	4
	How to send data to different index? Hello I have some kind of data that I want to filter to different index and in the future i would like to stop this i... by sarit_s Communicator in Getting Data In 06-12-2023 0 1	0	1
	How can I fix logs delay due to timezone difference in the UF server? Hi All i have a log source in the server timezone is in CST and logs are coming into the server as UTC time zone logs... by sekhar463 Path Finder in Getting Data In 06-11-2023 0 12	0	12
	How to configure active MQ logs to Splunk? Hi All, Could someone please provide steps to configure Active MQ logs into Splunk in the existing environment. Thank... by Srini Engager in Getting Data In 06-11-2023 0 0	0	0
	Why are props not working consistently? Hi Team, I have created a props for line breaking. I have tested it using a process of Add Data and Set sourcetype an... by sagar_shubham23 Explorer in Getting Data In 06-10-2023 0 1	0	1
	How to create an exception in imputs.conf? Hi everyone, I need to filter these events, but remove events related to RdrCEF.exeHow to create an exception in inpu... by RenanMarcelino Explorer in Getting Data In 06-10-2023 0 3	0	3
	how to view the list of Search Head Cluster Members on Deployer GUI When we connect UF/HF with Deployment Server we can see the list of UF/HF under Forwarder Mgmt-> Clients on UI Can we... by krutzagrawal Engager in Getting Data In 06-09-2023 0 2	0	2
	How to configure Splunk forwarder to encrypt data? I have recently (yesterday) installed a new instance of Splunk on a VM.Another VM in a separate datacentre has the Sp... by plenderj Engager in Getting Data In 06-09-2023 0 5	0	5