Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
I have a set of logs that no longer appear to be being indexed. I had originally configured the monitor as follows......
by
jheilman
Explorer
in
Getting Data In
04-20-2010
|
0
|
2
| ||
|
|
Hi Guys,
We have built a small Splunk app to retrieve and index web usage info from multiple SQL databases. My Spl...
by
rbruno7
Explorer
in
Getting Data In
04-20-2010
|
0
|
6
| ||
|
|
I have a Splunk forwarder instance that appears to be returning a value of 2 during start up.
I am curious as to ...
by
JHill
Explorer
in
Getting Data In
04-20-2010
|
1
|
1
| ||
|
|
Server is running 4.1.
This does not seem to be an issue for default udp (that is, udp/514) messages.
[udp://95...
by
gshah
Engager
in
Getting Data In
04-20-2010
|
2
|
3
| ||
|
|
I have a test Windows forwarder set up that is generating over 22,000 events relating to the splunk-optimize.exe proc...
by
jheilman
Explorer
in
Getting Data In
04-19-2010
|
2
|
1
| ||
|
We need to get Splunk to display date formats using the Australian format of dd/mm/yyyy rather than the US format whi...
by
the_wolverine
Champion
in
Getting Data In
04-16-2010
|
1
|
2
| ||
|
I have a test logfile I fed into Splunk:
Apr 13 10:41:16 support05 kernel: [1815783.556088] usb 2-1: new full spee...
by
jrodman
Splunk Employee
in
Getting Data In
04-17-2010
|
0
|
3
| ||
|
|
I let splunk monitor a directory of files. I found when any file got changed splunk will reindex all events in the fi...
by
tantingli
Explorer
in
Getting Data In
04-04-2010
|
2
|
8
| ||
|
|
How do you configure Splunk to monitor files within a VM? I installed Splunk within a VM and added a data input to mo...
by
cmccoy
Engager
in
Getting Data In
04-13-2010
|
1
|
3
| ||
|
|
Odd behaviour with some udp syslog input from a Panorama device (palo alto management device) and ArcSight connector ...
by
Chris_R_
Splunk Employee
in
Getting Data In
03-25-2010
|
0
|
5
| ||
|
|
Log entries have timestamps with Taiwan years. Taiwan year = current year-1911, so this year is 99. By default Splunk...
by
dskillman
Splunk Employee
in
Getting Data In
04-13-2010
|
2
|
3
| ||
|
|
I'm a fairly new admin and extremely new at looking at reports/data. I have an issue with my server that I can't trac...
by
Rikakiah
New Member
in
Getting Data In
04-15-2010
|
0
|
5
| ||
|
|
Is there a way to export the data that isn't correct then re-import it using the correct sourcetype? If not, is there...
by
Jaci
Splunk Employee
in
Getting Data In
04-16-2010
|
3
|
2
| ||
|
|
Is there a search I can execute that will show me all the passwords that have been sent across the network in clearte...
by
Joels
New Member
in
Getting Data In
04-15-2010
|
0
|
1
| ||
|
|
How do I setup multiline log files in splunk, specifically we have a set of logs which are irregular, Log entries do ...
by
Josh
Path Finder
in
Getting Data In
04-14-2010
|
3
|
6
| ||
|
|
I have a file that I need to index twice. Specifically, I need it sent/indexed to two different indexes. How could I ...
by
Simeon
Splunk Employee
in
Getting Data In
04-13-2010
|
1
|
4
| ||
|
|
I have Splunk 4.0.10 64bit version running in Windows 2008 R2 64bit. I noticed that when Splunkd service is turned on...
by
despera
Splunk Employee
in
Getting Data In
04-13-2010
|
2
|
1
| ||
|
|
I've heard there are some REST endpoints that allow you to refresh objects (such as new dashboards, nav menus, etc......
by
Dan
Splunk Employee
in
Getting Data In
04-13-2010
|
2
|
3
| ||
|
|
Hi, I just installed cisco_firewall_addon for version 4.1 of splunk and I am having some issues. I have an ASA and a ...
by
pillowhead
Explorer
in
Getting Data In
04-09-2010
|
1
|
5
| ||
|
|
Hello,
System type: Linux
We have splunk running on our centralized syslog-ng server. We then have other server...
by
norfleetj
Engager
in
Getting Data In
04-13-2010
|
1
|
4
| ||
|
|
Would someone confirm the following observations regarding data input configuration via inputs.conf?
when using wi...
by
hulahoop
Splunk Employee
in
Getting Data In
03-01-2010
|
0
|
3
| ||
|
|
Hi,
I have syslog_ng server (sles 10). Everything is logged in this way:
/var/log/HOSTS/xx-yy/hostname or ip/lo...
by
mudricd
Explorer
in
Getting Data In
04-13-2010
|
0
|
2
| ||
|
|
I just installed Splunk 4.1 (configured to run on system accounts) and the first thing i did was add an input monitor...
by
jrich523
Path Finder
in
Getting Data In
04-12-2010
|
1
|
1
| ||
|
|
Does anyone know if alwaysOpenFile still works in inputs.conf as of Splunk 4.1. It still shows up in the 4.1 docs, bu...
by
Lowell
Super Champion
in
Getting Data In
04-06-2010
|
1
|
6
| ||
|
|
I have a file with ~6M events that gets FTP'd to Splunk on a daily basis. Unfortunately I don't have control of the o...
by
dskillman
Splunk Employee
in
Getting Data In
04-12-2010
|
1
|
1
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Top Labels
-
add-on
2 -
administration
11 -
AIX
1 -
audit
1 -
blacklist
90 -
CLI
1 -
configuration
28 -
CSV
202 -
data
419 -
development
5 -
encryption
1 -
eval
2 -
field extraction
530 -
fields
4 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
883 -
host
151 -
HTTP Event Collector
418 -
index
522 -
indexer
668 -
indexing performance
1 -
inputs.conf
799 -
installation
4 -
intermediate forwarder
132 -
introduction
3 -
JSON
375 -
kvstore
1 -
Linux
425 -
login
1 -
Mac
29 -
metadata
1 -
metrics
2 -
modular input
179 -
monitor
301 -
other
13 -
proactive Splunk component monitoring
2 -
props.conf
925 -
regex
5 -
saved search
2 -
scripted input
236 -
search
1 -
search head
2 -
source
279 -
sourcetype
466 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
297 -
time
202 -
transforms.conf
545 -
troubleshooting
15 -
universal forwarder
1,492 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
14 -
whitelist
60 -
Windows
565 -
XML
89
- « Previous « Previous
- Next » Next »
Get Updates on the Splunk Community!
Detecting Brute Force Account Takeover Fraud with Splunk
This article is the second in a three-part series exploring advanced fraud detection techniques using Splunk. ...
Buttercup Games: Further Dashboarding Techniques (Part 9)
This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...
Buttercup Games: Further Dashboarding Techniques (Part 8)
This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...
