Getting Data In

Community Activity

	Why does btool quit with "SPLUNK_HOME must be set. Stopping."? My GoogleFu is failing me. There's a lot of btool tutorials, but I can't find this solution... I'm on a Windows 10 sy... by mykol_j Communicator in Getting Data In 03-20-2023 0 4	0	4
	Multiple file monitors on Windows machine- Some work only when others are disabled? I'm having difficulty ingesting log data from flat files into Splunk. I'm monitoring six different directories, each ... by mburgess97 Path Finder in Getting Data In 03-20-2023 0 10	0	10
	How to search for events with domains on DNS Blocklist? I have lookup table with a DNS blocklist. What query can I use to search for events with any of the blocklisted domai... by waJesu Path Finder in Getting Data In 03-20-2023 0 2	0	2
	Getting mainframe logs into Splunk? hi, How can i get logs from mainframe into splunk is there any forwarder avaialble? if not whatelse can be done to ge... by ChhayaV Communicator in Getting Data In 03-20-2023 0 8	0	8
	Connecting Universal Forwarder to Heavy Forwarder Issue? Hello Community, I am having issues connecting my Universal Forwarder with a Heavy Forwarder. I have the following se... by DanAlexander Communicator in Getting Data In 03-19-2023 0 4	0	4
	Best Practices for Managing Applications from Splunkbase? On the topic of managing applications from Splunkbase, I have a few questions. Take the TA-Exchange-Mailbox as an exa... by mburgess97 Path Finder in Getting Data In 03-19-2023 0 2	0	2
	How to combine multiple events into a single event based on identical timestamp? Hi, I am exporting my SAS server but it's splitting one big event to multiple small events with identical timestamp. ... by human96 Communicator in Getting Data In 03-19-2023 0 5	0	5
	How to index updates from existing CSV file? Hello, I have a CSV file with 2 fields. (field1,field2). The file is monitored and the content is indexed however th... by Juan_Leon Explorer in Getting Data In 03-18-2023 0 2	0	2
	Why is the interval setting in inputs.conf ignored? Currently on v 9.0.3 (but has been happening forever). On our universal forwarders we're using the Splunk provided bi... by mykol_j Communicator in Getting Data In 03-17-2023 0 6	0	6
	Could not use striptime to parse timestamp Having problem creating a props configurationSeeing could not use striptime to parse timestamp.Below logs comes from ... by Jackinout9 Loves-to-Learn in Getting Data In 03-17-2023 0 4	0	4
	Issues using Linux extraction using Splunk Linux TA Can someone guide me in the right direction. I have an issue with src_ip extraction using the nix splunk TA.I see t... by mburgess97 Path Finder in Getting Data In 03-17-2023 0 5	0	5
	Is it possible to configure 'REST' data input with a 'payload' parameter? Hello, Is it possible to configure 'REST' data input with a 'payload' parameter (bolded section in below 'curl' comma... by jawaharas Motivator in Getting Data In 03-16-2023 0 1	0	1
	How to parse the Docker json logs? Hi,This is the log sent from Docker("log":"[21:52:02] [/home/a143519/.local/share/code-server/extensions/ms-toolsai.j... by jackin Path Finder in Getting Data In 03-16-2023 0 1	0	1
	What changes we need to get the data into test index? Hi, While trying to configure the rapid7intsightsvm app the data is not indexing to index which I have configured. N... by smith_ Builder in Getting Data In 03-16-2023 0 3	0	3
	WinEventLog:Security EventCode 4732 Name instead of SID in Splunk- How can I view the account or username? Hello, I have all auditing enabled via GPO and I am getting WinEventLog:Security logs in Splunk. I am attempting to ... by garrywilmeth Explorer in Getting Data In 03-16-2023 0 1	0	1
	Is there documentation for an Icons list we can include in a Dashboard Panel? Hello.Is there a documentation to have a full visual list, how many and which icons, Splunk Enterprise includes in it... by verbal_666 Builder in Getting Data In 03-16-2023 0 3	0	3
	Blacklisting in [WinEventLog://Security] Im looking to drop EventID 4673 where the action=failureHere is an example log 3/15/2023 02:51:42 PM LogName=Security... by nick_currie Path Finder in Getting Data In 03-16-2023 0 8	0	8
	When installing the Universal Forwarder on a Domain Controller, are we supposed to check the box for "Add user as local administrator"? Hello. Please see the screenshot on this post, its from the Splunk Universal Forwarder (UF) installer steps. Are we s... by johannterc New Member in Getting Data In 03-15-2023 0 6	0	6
	Search to get difference of data from current month and previous month? Hi Legends, I want to know is this type of splunk query possible to create? We want a query which will pull 2 types o... by nicksrulz Explorer in Getting Data In 03-15-2023 0 9	0	9
	AWS CloudTrail SQS Based S3 error? Hi, I tried to configure CloudTrail SQS Based S3 and I got the following message: "Warning: This message does not hav... by leuorrouel Loves-to-Learn in Getting Data In 03-14-2023 0 6	0	6
	Looking for solutions for Linux/Unix Auditing? Fairly new Splunk user here looking for Linux auditing solutions. I am running a disconnected version of Splunk Ente... by kymenope Explorer in Getting Data In 03-14-2023 0 1	0	1
	High CPU utilization with splunk 9.x ( mainly windows UF) After upgrade to 9.x, higher cpu utilization. by hrawat Splunk Employee in Getting Data In 03-14-2023 0 1	0	1
	Timestamp parsing from filename HiI want to write the props for below logs.Actually the logs are coming with no timestamp and the file name having th... by jackin Path Finder in Getting Data In 03-13-2023 0 4	0	4
	Way to exclude ingestion of events for a specific IP address from a SourceType? When I try use : transforms.conf [setnull] REGEX = 192\.168\.1\.50, 172\.16\.1\.50 DEST_KEY = queue FORMAT = nullQ... by elvis5 Loves-to-Learn Lots in Getting Data In 03-13-2023 0 3	0	3
	What version of Splunk is the Splunk UF Daylight Savings Time bug fixed in? Good day. I have looked in the community posts and know that there is a daylight savings time bug in some Splunk UF'... by lesliejones3 Loves-to-Learn in Getting Data In 03-12-2023 0 1	0	1