Getting Data In

Community Activity

How do I fix this Error in pre-deploy check, uri=?/services/shcluster/captain/kvstore-upgrade/status? Hi , I am getting below error when I ran "splunk apply shclusrer-bundle" on Deployer Error in pre-deploy check, ... by ssuluguri Path Finder in Getting Data In 04-05-2023 0 4	0	4
How can I use regex to list a table? I have a event like this: I want to list a table following CLIENT_LIST. For example: ip_vpn name_vpn ... by jacknguyen Path Finder in Getting Data In 04-04-2023 0 4	0	4
Issue with SNOW \| Data is not getting in correctly We have enabled the jobs to pull the records from each of the tables, post which we have created a report/dashboard a... by kittu1 New Member in Getting Data In 04-04-2023 0 5	0	5
Any one using Splunk add-on for sharepoint? Hello, Does anyone is still using Splunk add-on for sharepoint? Looks like it is not available in splunkbase anymore.... by Roy_9 Motivator in Getting Data In 04-04-2023 0 0	0	0
Splunk UF file permissions on windows servers? Hello, In order to monitor a file via UF, those files should grant read-only permissions user and group as splunk:spl... by Roy_9 Motivator in Getting Data In 04-04-2023 0 1	0	1
What is Splunk-MonitorNoHandle.exe? In my windows environment, Universal Forwarder 6.1.7 is installed. When monitoring processes, I noticed that Splunk ... by yutaka1005 Builder in Getting Data In 04-04-2023 0 5	0	5
Need help to send data Splunk Cloud using HEC hi allnew to Splunk and its ecosystemI was asked to research it a bit and try to inject data in 2 ways: local file an... by dardar Engager in Getting Data In 04-04-2023 0 3	0	3
How to configure different sourcetypes for udp port 514 ? Hello, I have configured two network devices (cisco router and fortigate firewall) to send logs to Splunk server via... by aeshan Engager in Getting Data In 04-04-2023 1 12	1	12
Why isn't my Transforms.conf working as expected? I have below configurations in transforms and props config files to fetch only events containing keyword 'splunking' ... by DarshanBK Explorer in Getting Data In 04-04-2023 0 3	0	3
How to map my query with inputlookup values? I am running script to get ping status of the servers and i onboarded the logs and extract filed as Servers.Now in my... by karthi2809 Builder in Getting Data In 04-03-2023 0 2	0	2
Help needed with Props.conf Hello,Can some one please help me with props.conf for the below log?Timestamp Process TID Area Category EventID Level... by Roy_9 Motivator in Getting Data In 04-03-2023 0 15	0	15
Issue filtering events with regex and props.conf Hello, I am trying to figure out how to edit props.conf so that it splits my events properly. The events are added to... by xwill13 Engager in Getting Data In 04-03-2023 0 2	0	2
SEDCMD trouble- How to delete vfwew from field account? Hello everyone! I'm trying to make props file which will trim all not cyrillic symbols from field "account" My log ex... by bosseres Contributor in Getting Data In 04-02-2023 0 2	0	2
Looking for alternatives to outputcsv in a Cloud deployment Hi,Can someone recommend a way to save the results of a Splunk search locally or to shared drive? We`re using a hybri... by tomapatan Contributor in Getting Data In 04-01-2023 0 2	0	2
Need help with AD Hi.I want to try Splunk on windows server 2019, i have windows server and a client, what to do to make splunk read wh... by Splunk-tester Observer in Getting Data In 03-31-2023 0 2	0	2
serverclass whitelist.from_pathname auto-reload- Is there a better way? I setup half a dozen serverclasses leveraging CMDB sourced .csv and whitelist.from_pathnameThis works great to managi... by splunk_zen Builder in Getting Data In 03-31-2023 0 2	0	2
How to change from XML format to "Normal" format? Hi there, Before installing the Windows TA addon to a server , Windows Event Logs were shown in a different format, t... by jamie1 Communicator in Getting Data In 03-31-2023 0 5	0	5
html event line_break configuration? <html><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"><meta name="Generator" content="Micro... by karu0711 Communicator in Getting Data In 03-31-2023 0 1	0	1
Ingesting Windows Service Status Data? Hi There, I am new to Splunk and am currently trying to get Windows Services data into Splunk. I am using Splunk Clou... by jamie1 Communicator in Getting Data In 03-31-2023 0 2	0	2
Why won't my regex mask my data? Hi,i have a challenge masking out password data from the ps-source/sourcetype events at indexing time. We have made ... by wsveum Explorer in Getting Data In 03-31-2023 0 5	0	5
How to show json data from different places in a table? Hi, i have below json data in splunk logs at different places(different rows). All are belongs to the unique id : 123... by Jasmine Path Finder in Getting Data In 03-31-2023 0 17	0	17
Solution : basic starter queries for Splunk admin Hello, sharing my experience for beginners, especially new Splunk customers  Connected UF / forwarders : index... by splunkreal Influencer in Getting Data In 03-31-2023 1 1	1	1
Microsoft IIS add-on - no logs being ingested? I have a Splunk Standalone instance running at v8.2.10 I have recently installed the Microsoft Add-on for Microsoft I... by mike_k Communicator in Getting Data In 03-30-2023 0 7	0	7
How to create a new field while ingesting data using ingest-time eval? Hi Splunkers, I wanted to create a new field name called "app_id" and send it along data while ingesting into Splunk... by mala_splunk_91 Explorer in Getting Data In 03-30-2023 0 1	0	1
Why am I unable to store more than 50,000 results in lookup table? See title, I'm using a scheduled query to prune a set of results from a lookup table, this lookup table has over 2m r... by Mr_person Explorer in Getting Data In 03-30-2023 0 2	0	2