Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Community Activity
 | In inputs.conf the default host name is set to the fqdn, test-server.foobar.com. But when I search for that host, it ... by Jaci Splunk Employee  in Getting Data In 04-08-2010 2 5 | 2 | 5 | |
| | Hi, I just created a new app and wanted to point my network inputs to another index, managed by my app. So, I modif... by rnutting24 Engager in Getting Data In 04-08-2010 1 3 | 1 | 3 | |
 | Is there a splunk command or REST endpoint to see the tailing status of monitored files? by the_wolverine Champion in Getting Data In 04-08-2010 4 2 | 4 | 2 | |
| | Search is index="_internal" source="*metrics.log" group="queue" | timechart perc90(current_size) by name Results are... by MikeyG Explorer in Getting Data In 04-07-2010 2 3 | 2 | 3 | |
| | I'm trying to index a file on a mapped network drive, but I keep getting seeing 'Access is denied' in splunkd.log. I... by Mick Splunk Employee in Getting Data In 04-07-2010 4 1 | 4 | 1 | |
| | On my old setup I had all syslogs going to syslog on the Splunk server, but now I'm doing a fresh setup with Ubuntu 9... by rogerssoftware Explorer in Getting Data In 04-07-2010 1 4 | 1 | 4 | |
| | I have a bunch of Lightweight Forwarders (LWF) forwarding to my central indexer. What happens to my events when the... by the_wolverine Champion in Getting Data In 04-06-2010 3 4 | 3 | 4 | |
| | I've just upgraded to 4.1 and now I'm getting an error when I search saying: The lookup table 'sid_lookup' does not ... by Alan_Bradley Path Finder in Getting Data In 04-06-2010 3 7 | 3 | 7 | |
| | How do I go about configuring splunk forwarders running on Linux to forward to a specific index for Linux-related inf... by cdavidy Explorer in Getting Data In 04-06-2010 5 2 | 5 | 2 | |
| | If the script to roll the hotDB to the warmDB is "| debug cmd=roll index=main", would there be one for rolling the wa... by BunnyHop Contributor in Getting Data In 04-06-2010 4 2 | 4 | 2 | |
| | In my office we have a script on our log servers that monitors the hosts sending logs and alerts us if a machine star... by thepocketwade Path Finder in Getting Data In 04-05-2010 0 4 | 0 | 4 | |
| | All of my events show up with gid=-1,uid=-1. Is this a bug or am I doing something wrong? by oreoshake Communicator in Getting Data In 04-05-2010 1 3 | 1 | 3 | |
| | UPDATE: This appears to be a bug specifically related to 4.0.10. The following is a work around in system/local/inp... by oreoshake Communicator in Getting Data In 04-03-2010 1 3 | 1 | 3 | |
| | I have lots of hosts in my environment, but I only want to search across a few of them from time to time. Can I someh... by maverick Splunk Employee in Getting Data In 03-31-2010 1 2 | 1 | 2 | |
| | We have an global application hosted within a VM environment feeding a common Splunk index server. However the serve... by matt_1 Explorer in Getting Data In 03-30-2010 0 2 | 0 | 2 | |
| | Everytime I run a splunk command on windows 7, the command runs in a separate window and closes before I can see what... by oreoshake Communicator in Getting Data In 03-29-2010 1 2 | 1 | 2 | |
| | Hai There, I am dealing with a forwarder to indexer which is reading a kiwi directory with several types of devices.... by Starlette Contributor in Getting Data In 03-29-2010 1 2 | 1 | 2 | |
| | Does a sinkhole work on all types of forwarders? by Michael_Wilde Splunk Employee in Getting Data In 03-29-2010 3 1 | 3 | 1 | |
| | How to disable hostname chaining? Splunk picks the chained hostname rather than the original. by zliu Splunk Employee in Getting Data In 03-26-2010 0 1 | 0 | 1 | |
| | I have a light forwarder (v4.0.7) I want to change this to a forwarder instead of a light forwarder. The reason being... by Alan_Bradley Path Finder in Getting Data In 03-26-2010 0 3 | 0 | 3 | |
| | We're upgrading our forwarders and we always get the warning that outputs.conf cannot be migrated. However, simply m... by oreoshake Communicator in Getting Data In 03-24-2010 0 1 | 0 | 1 | |
| | When we build 2 Splunk indexing servers for High Availablity, 2 Splunk indexing servers may receive the same log data... by Alan_Bradley Path Finder in Getting Data In 03-24-2010 0 1 | 0 | 1 | |
| | We plan to use Splunk to keep log for several java application including web server like Tomcat. Those application ar... by Alan_Bradley Path Finder in Getting Data In 03-24-2010 2 1 | 2 | 1 | |
| | Why would there be a gap of logged events in metrics.log between 01-21-2010 15:47:39.421 and 01-22-2010 08:53:28.231 ... by hulahoop Splunk Employee in Getting Data In 03-24-2010 0 5 | 0 | 5 | |
| | This is related to an earlier question: http://answers.splunk.com/questions/490/why-do-variations-in-sourcetype-appea... by Glenn Builder in Getting Data In 03-22-2010 2 5 | 2 | 5 |
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Top Labels
-
administration
13 -
blacklist
92 -
configuration
32 -
CSV
209 -
data
502 -
development
5 -
field extraction
564 -
forwarder management
2 -
heavy forwarder
961 -
host
159 -
HTTP Event Collector
444 -
index
544 -
indexer
715 -
inputs.conf
840 -
installation
5 -
intermediate forwarder
145 -
JSON
395 -
Linux
461 -
Mac
30 -
modular input
195 -
monitor
313 -
other
83 -
props.conf
995 -
saved search
2 -
scripted input
249 -
search
1 -
search head
2 -
source
291 -
sourcetype
496 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
syslog
324 -
time
204 -
transforms.conf
584 -
troubleshooting
14 -
universal forwarder
1,571 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
16 -
whitelist
60 -
Windows
595 -
XML
91
- « Previous
- Next »
Get Updates on the Splunk Community!
Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas
Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas
Cisco Live 2026 is almost here, and this ...
What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)
Hello Splunkers,
So you searched, “what is the name of the usb key inserted by bob smith?”
Not gonna lie… ...
Automating Threat Operations and Threat Hunting with Recorded Future
Automating Threat Operations and Threat Hunting
with Recorded Future
June 29, 2026 | Register
Is your ...
Unanswered Topics
