Getting Data In

Getting Data In
Community Activity
stockwel
Hi, Trying to send all eventIDs from WinEventLog:Security to NullQueue with the exception of 592 and 593. Still get...
by stockwel Engager in Getting Data In 11-16-2010
2 4
2
4
Jason
I have a very talkative data source that I only want a few fields - not entire events - from. How do I keep the parts...
by Jason Motivator in Getting Data In 11-16-2010
0 3
0
3
lrhazi
Can I say this? [source::/usr/local/blackboard/*] TRANSFORMS-routing=otherRouting In my inputs, I have pretty long...
by lrhazi Path Finder in Getting Data In 11-16-2010
0 1
0
1
melipla
Somehow I've managed to get three different sourcetypes for syslog appearing in my search results: "syslog" 2,049,49...
by melipla Explorer in Getting Data In 11-16-2010
1 5
1
5
Ant1D
Hey, I have a Titlebar module in my form with the following code: <module name="TitleBar" layoutPanel="viewHea...
by Ant1D Motivator in Getting Data In 11-16-2010
0 3
0
3
igoforth
I have a Win7 PC on which I would like to run splunk, but the majority of machines (mostly UNIX) I would like to moni...
by igoforth New Member in Getting Data In 11-16-2010
0 3
0
3
jslocomb
I am attempting to index a apache logs directory. We use cronolog to split our apache log files We have a sub direc...
by jslocomb New Member in Getting Data In 11-15-2010
0 3
0
3
andiih
I'm trying to configure splunk to collect system and security logs via WMI from workstations. I don't know who is at ...
by andiih Explorer in Getting Data In 11-15-2010
1 4
1
4
ventilyator
I'm trying to configure splunk via REST API. Can anybody show working POST-request to create new data input? Just 1 c...
by ventilyator New Member in Getting Data In 11-14-2010
0 1
0
1
Hazel
Hello We run a Splunk system where our Indexers are all on Linux and our forwarders are light forwarders across Wind...
by Hazel Communicator in Getting Data In 11-12-2010
1 1
1
1
cpenkert
We recently made several indexes.conf file changes, notably changing our bucket size from 5GB to 1GB. Along with thi...
by cpenkert Path Finder in Getting Data In 11-12-2010
3 7
3
7
Genti
I checked splunkd.log today and all i see is this: 06-02-2010 14:04:00.013 INFO BucketMover - will attempt to freeze:...
by Genti Splunk Employee Splunk Employee in Getting Data In 11-11-2010
0 2
0
2
frankejj
Hi, I am trying to override the default hostname that is being set for the syslog entries on /var/log/messages. The...
by frankejj Explorer in Getting Data In 11-10-2010
0 3
0
3
mfrost8
We're trying to setup some test monitoring of a VMWare ESX host (not ESXi). Because our Splunk instance does not run...
by mfrost8 Builder in Getting Data In 11-10-2010
1 3
1
3
twinspop
I'm trying to filter noisy events that have recently pushed us over license usage. The events come from a lightweight...
by twinspop Influencer in Getting Data In 11-10-2010
0 4
0
4
remy06
Hi, I have installed Splunk on serverA. ServerA is configured to monitor local events and at the same time is pullin...
by remy06 Contributor in Getting Data In 11-10-2010
0 5
0
5
mgherman
Hi, To utilise some additional space that I have brought online, I have configured the colddb path to use new storag...
by mgherman Explorer in Getting Data In 11-10-2010
1 2
1
2
eelisio2
Using the Unix App, monitoring Radius log files. /var/log/radius/radius.log Current log file gets renamed and gzipped...
by eelisio2 Path Finder in Getting Data In 11-09-2010
0 2
0
2
MattK
Have a 4.1.4 install on Windows 2008 R2 that I would like to improve performance on. Indexes stored on dedicated RAID...
by MattK Explorer in Getting Data In 11-09-2010
0 2
0
2
joonradley
Is it possible to redirect the outputcsv so that the csv file get returned to the browers so that the brower will off...
by joonradley Path Finder in Getting Data In 11-09-2010
0 1
0
1
mmletzko
We have an indexer and two forwarders. The forwarders are installed on other syslog servers to forward their syslogs...
by mmletzko Path Finder in Getting Data In 11-09-2010
1 3
1
3
fisk12
Hello I have just installed splunk on my work and have the firewalls and wireless stuff send syslog to it. Im also l...
by fisk12 Path Finder in Getting Data In 11-08-2010
0 2
0
2
katalinali
I install splunk 4.1.5 and input windows eventlog from remote host, but I find splunk just index data from date of in...
by katalinali Path Finder in Getting Data In 11-05-2010
0 1
0
1
nvashish123
Hi, I was just wondering if Splunk can be sceheduled to monitor a file regularly, and send out alerts if this file d...
by nvashish123 Engager in Getting Data In 11-05-2010
2 2
2
2
kmattern
Version 4.0.11 I have a number of .CSV files in my log folder on a light forwarder. Unfortunately at least one of th...
by kmattern Builder in Getting Data In 11-05-2010
0 3
0
3
Get Updates on the Splunk Community!

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

In cybersecurity, defenders respond to threats. Architects design the systems that stop them.    As ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...
Top Solution Authors