Getting Data In

Community Activity

What is the most stable version of Splunk presently? Hello All, Hope you are doing good.. 1. Can anyone please let me know what is the most stable version of Splunk ... by debjit_k Path Finder in Getting Data In 05-17-2023 0 4	0	4
How to monitor missing sourcetypes/hosts? I was tasked with the job to monitor our endless amounts of sourcetypes and sourcetypes per host to be alerted when o... by JoeSco27 Communicator in Getting Data In 05-17-2023 2 10	2	10
Forwarding raw data to third party systems with Syslog from an HF? Hi Splunkers, today I'm here not for an issue, or better, not yet, but to "pull all togheter" the components of my ta... by SplunkExplorer Contributor in Getting Data In 05-17-2023 0 7	0	7
How to enable query string authorization on cloud instance? Hi! I'm trying to set up HEC with my app outgoing webhook. There's no way to pass token in auth header, so I intended... by skyliver Engager in Getting Data In 05-17-2023 1 0	1	0
Why can't Splunk run a scripted input on Windows even though it has full access to that script? Hi all! My question is, why splunk can't run a scripted input on Windows even though it has full access to that scrip... by Zhanali Path Finder in Getting Data In 05-16-2023 0 0	0	0
How to check if an HEC is up or not before posting any data to it? Hi, I am trying to post data to Splunk using HEC. But before posting I want to check if the endpoint I'm trying to po... by sathwikakamai Engager in Getting Data In 05-15-2023 2 5	2	5
How Can I Get My Splunk Container to Monitor its Host? Hello all! I am unable to ingest log data from the host on which my docker container resides. Since it is a conta... by VCorralPlex21 Loves-to-Learn in Getting Data In 05-15-2023 0 1	0	1
How to find out if the host is forwarding logs by syslog or UF? We have multiple devices forwarding the logs to Splunk which syslog mechanism and UF, as it's difficult to identify t... by MayurMangoli Loves-to-Learn Everything in Getting Data In 05-15-2023 0 3	0	3
How do I ignore few keyword contained events at forwarder not to send? I want to ignore few keyword contained events at forwarder level NOT at indexer. Below are the sample log: to Ignore ... by sathiyasun Explorer in Getting Data In 05-15-2023 0 2	0	2
How to show customized data in output? Hi, I've recently started using Splunk logs. I have a query to fetch client IDs who call my APIs. These client IDs ar... by avd New Member in Getting Data In 05-12-2023 0 1	0	1
How to pull timezone from a field in each event? Our server is forwarding events for us and includes some extra fields at the beginning of each event. One of those fi... by rmjohns Explorer in Getting Data In 05-12-2023 0 1	0	1
How can I resolve Splunk input offset? Hi, I am onboarding the /var/log/secure path and i am getting the bellow about offset INFO WatchedFile /path/to/file... by joe06031990 Communicator in Getting Data In 05-12-2023 0 2	0	2
How to troubleshoot event mismatch in data? Hi Team,Recently, I have configured splunk in my project to monitoring the application logs. I could find there is so... by gowthammahes Path Finder in Getting Data In 05-12-2023 0 3	0	3
Error of Data Quality HelloNeed some help to fix the below error03-14-2014 17:11:49.108 -0300 ERROR LineBreakingProcessor - Line breaking r... by jackin Path Finder in Getting Data In 05-12-2023 0 0	0	0
single event for mutiple lines Hi Team, I am collecting metrics using API calls for every 5 minutes , but all the metrics are coming as a single eve... by roopeshetty Path Finder in Getting Data In 05-11-2023 0 0	0	0
How do I resolve Universal forwarder setup wizard ended prematurely Error installing Splunk UF in Windows Server? Hi, While trying to install Splunk UF in Windows Server 2022 to send logs to Splunk Cloud Instance, we encounter this... by varshini_3141 Loves-to-Learn in Getting Data In 05-11-2023 0 1	0	1
Error in splunkd - fileclassifiermanager - Error (bad allocation) encountered ... logs are not being ingested into Splunk. The Inputs and outputs are configured correctly. receiving the following err... by kcooper Communicator in Getting Data In 05-11-2023 1 2	1	2
Is there possibility to find index name for the host included? Is there any possibility to find the index name mapped to the host from any search query(internal index), reason behi... by JGP Explorer in Getting Data In 05-11-2023 0 1	0	1
How to get data from hyper-v CSV(cluster shared volume)? Hello all, I am struggling to get perfmon data in for our hyper-v CSV's. I have tried various inputs from the default... by tkerr1357 Path Finder in Getting Data In 05-11-2023 0 4	0	4
How to change timezone to MST? we have data written in MST and data is indexed without any issue. Splunk servers are in CST as well forwarder in CST... by JGP Explorer in Getting Data In 05-11-2023 0 9	0	9
Why is notable index empty? After installing the Splunk Enterprise Security (ES) app using the splunk-enterprise-security_701.spl file, I noticed... by NeedNotToKnow Explorer in Getting Data In 05-11-2023 0 6	0	6
How to disable HEC SSL for SC4S? hello All, For a separate reason we have had to disable SSL for HEC tokens on our HF. SC4S now will not connect as ... by Leon_P Explorer in Getting Data In 05-11-2023 0 0	0	0
How to split json field with backslash separated values? Hi, I have a json field where multiple values listed separated by backslash in raw (space in list view) like this: "v... by norbertt911 Communicator in Getting Data In 05-11-2023 0 3	0	3
Can I monitor kafka AKHQ from splunk? AKHQ will show topic / connector as red/yellow if there is some issue, can Splunk capture those and config alert base... by carfield New Member in Getting Data In 05-10-2023 0 1	0	1
How to archive Splunk data from on prim Splunk instance to Splunk Cloud using dynamic data active archive? We have a requirement to archive all on-prim Splunk data to Splunk cloud instance. Client has purchased Dynamic Data ... by MinalPatel Loves-to-Learn Lots in Getting Data In 05-10-2023 0 0	0	0