Getting Data In

Getting Data In
Community Activity
tier2ops
This has happened twice so far in a week. Users begin contacting me that they are unable to log in. Both times I ra...
by tier2ops Explorer in Getting Data In 04-21-2010
1 6
1
6
alextsui
Hello, when using the following setup in props.conf, i was able to get the sourcetypes I want. [source::/var/splunk/...
by alextsui Path Finder in Getting Data In 04-21-2010
2 1
2
1
jheilman
I have a set of logs that no longer appear to be being indexed. I had originally configured the monitor as follows......
by jheilman Explorer in Getting Data In 04-21-2010
0 2
0
2
rbruno7
Hi Guys, We have built a small Splunk app to retrieve and index web usage info from multiple SQL databases. My Splun...
by rbruno7 Explorer in Getting Data In 04-21-2010
0 6
0
6
JHill
I have a Splunk forwarder instance that appears to be returning a value of 2 during start up. I am curious as to wh...
by JHill Explorer in Getting Data In 04-20-2010
1 1
1
1
gshah
Server is running 4.1. This does not seem to be an issue for default udp (that is, udp/514) messages. [udp://9514]...
by gshah Engager in Getting Data In 04-20-2010
2 3
2
3
jheilman
I have a test Windows forwarder set up that is generating over 22,000 events relating to the splunk-optimize.exe proc...
by jheilman Explorer in Getting Data In 04-20-2010
2 1
2
1
the_wolverine
We need to get Splunk to display date formats using the Australian format of dd/mm/yyyy rather than the US format whi...
by the_wolverine Champion in Getting Data In 04-17-2010
1 2
1
2
jrodman
I have a test logfile I fed into Splunk: Apr 13 10:41:16 support05 kernel: [1815783.556088] usb 2-1: new full speed ...
by jrodman Splunk Employee Splunk Employee in Getting Data In 04-17-2010
0 3
0
3
tantingli
I let splunk monitor a directory of files. I found when any file got changed splunk will reindex all events in the fi...
by tantingli Explorer in Getting Data In 04-17-2010
2 8
2
8
cmccoy
How do you configure Splunk to monitor files within a VM? I installed Splunk within a VM and added a data input to m...
by cmccoy Engager in Getting Data In 04-17-2010
1 3
1
3
Chris_R_
Odd behaviour with some udp syslog input from a Panorama device (palo alto management device) and ArcSight connector ...
by Chris_R_ Splunk Employee Splunk Employee in Getting Data In 04-17-2010
0 5
0
5
dskillman
Log entries have timestamps with Taiwan years. Taiwan year = current year-1911, so this year is 99. By default Splu...
by dskillman Splunk Employee Splunk Employee in Getting Data In 04-17-2010
2 3
2
3
Rikakiah
I'm a fairly new admin and extremely new at looking at reports/data. I have an issue with my server that I can't tra...
by Rikakiah New Member in Getting Data In 04-17-2010
0 5
0
5
Jaci
Is there a way to export the data that isn't correct then re-import it using the correct sourcetype? If not, is there...
by Jaci Splunk Employee Splunk Employee in Getting Data In 04-16-2010
3 2
3
2
Joels
Is there a search I can execute that will show me all the passwords that have been sent across the network in clearte...
by Joels New Member in Getting Data In 04-15-2010
0 1
0
1
Josh
How do I setup multiline log files in splunk, specifically we have a set of logs which are irregular, Log entries do ...
by Josh Path Finder in Getting Data In 04-15-2010
3 6
3
6
Simeon
I have a file that I need to index twice. Specifically, I need it sent/indexed to two different indexes. How could...
by Simeon Splunk Employee Splunk Employee in Getting Data In 04-14-2010
1 4
1
4
despera
I have Splunk 4.0.10 64bit version running in Windows 2008 R2 64bit. I noticed that when Splunkd service is turned o...
by despera Splunk Employee Splunk Employee in Getting Data In 04-13-2010
2 1
2
1
Dan
I've heard there are some REST endpoints that allow you to refresh objects (such as new dashboards, nav menus, etc......
by Dan Splunk Employee Splunk Employee in Getting Data In 04-13-2010
2 3
2
3
pillowhead
Hi, I just installed cisco_firewall_addon for version 4.1 of splunk and I am having some issues. I have an ASA and a ...
by pillowhead Explorer in Getting Data In 04-13-2010
1 5
1
5
norfleetj
Hello, System type: Linux We have splunk running on our centralized syslog-ng server. We then have other servers fo...
by norfleetj Engager in Getting Data In 04-13-2010
1 4
1
4
hulahoop
Would someone confirm the following observations regarding data input configuration via inputs.conf? when using wild...
by hulahoop Splunk Employee Splunk Employee in Getting Data In 04-13-2010
0 3
0
3
mudricd
Hi, I have syslog_ng server (sles 10). Everything is logged in this way: /var/log/HOSTS/xx-yy/hostname or ip/log fi...
by mudricd Explorer in Getting Data In 04-13-2010
0 2
0
2
jrich523
I just installed Splunk 4.1 (configured to run on system accounts) and the first thing i did was add an input monitor...
by jrich523 Path Finder in Getting Data In 04-12-2010
1 1
1
1
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...