Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
Hi, can anyone tell me if I could do this using Splunk: Log from particular host to a particular directory, Archive l...
by
uber_cookie
New Member
in
Getting Data In
06-08-2010
|
0
|
1
| ||
|
Does anyone have experience integrating splunk with a hierarchal storage management system (like AMASS, Legato, or Ti...
by
dwaddle
SplunkTrust
in
Getting Data In
06-07-2010
|
1
|
1
| ||
|
For some reason, looks like 2-3 of my indexes have stopped indexing. The monitor point to the indexes is pointed to d...
by
balbano
Contributor
in
Getting Data In
06-04-2010
|
0
|
3
| ||
|
|
I want a search that will tell me the total throughput of my indexing server, and then setup a notification if that t...
by
seanlon11
Path Finder
in
Getting Data In
05-28-2010
|
0
|
8
| ||
|
|
I would like to splunk TripWire events so that I can search and correlate them with my other security, syslog, and ap...
by
maverick
Splunk Employee
in
Getting Data In
06-07-2010
|
0
|
1
| ||
|
|
I’m currently getting a new log source ready for production, and I almost have it except for one issue. I’m forwardin...
by
carmackd
Communicator
in
Getting Data In
06-04-2010
|
0
|
10
| ||
|
I am trying to build a report where I want to summarize the number of events for an entire year by day sorting by hos...
by
mctester
Communicator
in
Getting Data In
06-04-2010
|
0
|
4
| ||
|
|
So I have an xml formatted log added as a source, sourcetype'd as WSE_audit, and I'm trying to get it to basically sp...
by
Steve_Litras
Path Finder
in
Getting Data In
05-28-2010
|
3
|
8
| ||
|
|
env[home] = linux, centos, splunk 4.0.11, everything on one test box
cat /opt/splunk/etc/apps/unix/bin/uname.sh
...
by
oreoshake
Communicator
in
Getting Data In
06-02-2010
|
0
|
6
| ||
|
In my index, in the warm directory, I have some buckets like db_1274392278_1271804233_0, some hot_v1_1, and then this...
by
jrodman
Splunk Employee
in
Getting Data In
05-31-2010
|
4
|
3
| ||
|
|
What can I do to limit search results for one or more sourcetypes.
I am able to get the results through the Splun...
by
sandy1978
New Member
in
Getting Data In
05-28-2010
|
0
|
4
| ||
|
|
Anyone have a good working python DB table dump scripts that keeps track of last row marker?
I guess it would be i...
by
clyde772
Communicator
in
Getting Data In
05-03-2010
|
4
|
4
| ||
|
I'm seeing the following errors in splunkd.log and my file isn't being monitored properly -- the events don't seem to...
by
the_wolverine
Champion
in
Getting Data In
02-12-2010
|
1
|
3
| ||
|
|
Wondering if anyone has ever integrated ClearCase with Splunk yet. Does ClearCase provide text logs on disk or maybe ...
by
maverick
Splunk Employee
in
Getting Data In
05-28-2010
|
0
|
3
| ||
|
|
I'm having a problem trying to monitor the .bash_history file. I've set up a monitor for /home with a whitelist of "....
by
Peter_B
Explorer
in
Getting Data In
04-26-2010
|
1
|
5
| ||
|
|
I am seeing the following errors over and over again in my splunkd.log file. I'm not sure where to go to resolve this...
by
srich
Explorer
in
Getting Data In
05-20-2010
|
1
|
3
| ||
|
|
Possible Duplicate: Juniper Netscreen TCP Syslog messages not breaking properly
Hi, I have an SSG20 sending s...
by
mikaelwitt
New Member
in
Getting Data In
05-28-2010
|
0
|
4
| ||
|
|
I know the forwarder will buffer its data if the receiver goes down for some reason.Where is the data stored(director...
by
skibum
Engager
in
Getting Data In
05-14-2010
|
2
|
6
| ||
|
|
Is there any way to check for forwarders that have not connected recently and include a "sourcetype, source or host" ...
by
Chris_R_
Splunk Employee
in
Getting Data In
05-28-2010
|
0
|
1
| ||
|
|
I have a dir of text files named like such scriptcalled_201005211317_stdout.txt
how do i index them on that date? ...
by
hiddenkirby
Contributor
in
Getting Data In
05-21-2010
|
0
|
8
| ||
|
|
I have a saved search that notifies me when a forwarder goes up or down based on various TcpInputProc and TcpOutputPr...
by
Lowell
Super Champion
in
Getting Data In
05-26-2010
|
4
|
1
| ||
|
|
All, I noticed discussions on how to prevent Splunk from stripping priority levels from UDP Syslog messages.
Will ...
by
scornish
Engager
in
Getting Data In
05-27-2010
|
3
|
1
| ||
|
|
Is there a way to pass the result of a savedsearch to a script? For example, if the search returns:
suser duser sh...
by
ubko
Explorer
in
Getting Data In
05-26-2010
|
2
|
2
| ||
|
|
Some events flow into the Splunk instance via syslog sockets.
For a brief period of time, the sourcetypes that cam...
by
sdwilkerson
Contributor
in
Getting Data In
05-27-2010
|
1
|
3
| ||
|
|
I have a .csv file that I'm indexing. There is no timestamp information in the .csv file, but there is a date in the ...
by
lyndac
Contributor
in
Getting Data In
05-26-2010
|
2
|
5
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Top Labels
-
add-on
2 -
administration
11 -
AIX
1 -
audit
1 -
blacklist
90 -
CLI
1 -
configuration
29 -
CSV
205 -
data
442 -
development
5 -
encryption
1 -
eval
2 -
field extraction
537 -
fields
5 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
904 -
host
152 -
HTTP Event Collector
422 -
index
530 -
indexer
686 -
indexing performance
1 -
inputs.conf
813 -
installation
4 -
intermediate forwarder
135 -
introduction
3 -
JSON
381 -
kvstore
1 -
Linux
436 -
login
1 -
Mac
30 -
metadata
1 -
metrics
2 -
modular input
182 -
monitor
304 -
monitoring console
1 -
other
28 -
proactive Splunk component monitoring
2 -
props.conf
944 -
regex
5 -
saved search
2 -
scripted input
238 -
search
1 -
search head
2 -
source
284 -
sourcetype
478 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
304 -
time
203 -
transforms.conf
554 -
troubleshooting
15 -
universal forwarder
1,518 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
14 -
whitelist
60 -
Windows
573 -
XML
90
- « Previous « Previous
- Next » Next »
Get Updates on the Splunk Community!
AppDynamics Summer Webinars
This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...
SOCin’ it to you at Splunk University
Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...
Credit Card Data Protection & PCI Compliance with Splunk Edge Processor
Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...
