Getting Data In

Community Activity

How to send noisy windows event to null? I have tried the following to send the included windows event to null but it does not work I have tried the props.con... by dford77 Engager in Getting Data In 02-22-2023 0 2	0	2
How to add prefix string to events before forwarding to external server? Hi everybody, I would like to duplicate data coming from my sourcetype in such a way: - send the original data to Spl... by Zanusha443 Explorer in Getting Data In 02-22-2023 0 0	0	0
How to ingest Cynet XDR logs to Splunk Cloud? Hello, I need to ingest Cynet XDR audit and alert events into Splunk Cloud solution but can not find a procedure docs... by Roberto-P Explorer in Getting Data In 02-22-2023 0 0	0	0
How to monitor a file path with a Splunk UF containing a windows environment variable? Hi,I am trying to monitor many exchange servers that are not configured the same.I was giving the paths to monitor co... by Glasses2 Communicator in Getting Data In 02-22-2023 0 2	0	2
Powershell Scripted Input not getting ingested to splunk Hello,Please help me identify my issue maybe I'm missing something I don't see.I created simple powershell script to ... by jmmontejo Explorer in Getting Data In 02-22-2023 0 0	0	0
How can I parse iso 8583 messages in Splunk? Hi How can I parse iso 8583 messages in Splunk? Here is the sample iso 8583 message that exist in my log: 10:10:00 ... by indeed_2000 Motivator in Getting Data In 02-22-2023 0 3	0	3
FilesystemChangeWatcher - error getting attributes of path? System specs: # cat /etc/redhat-release Red Hat Enterprise Linux Server release 5.10 (Tikanga) # uname -a Linux llwb... by nbowman Path Finder in Getting Data In 02-22-2023 6 7	6	7
Issues with Splunk Windows universal forwarder zip file? Hi Team, I am facing issues with Splunk universal forwarder installation-* in windows environment. when I went throug... by indudhar Engager in Getting Data In 02-22-2023 0 14	0	14
How to create Conditional statements with foreach? Hi there - trying to get foreach statement to apply conditional statement. Essentialy in the eval statement tried a ... by allanrm Observer in Getting Data In 02-21-2023 0 1	0	1
How to store events from summary index to filter search result? Hi Experts, I'm trying to validate whether the user is a new user or an existing user using summary index. The userLo... by Thulasinathan_M Contributor in Getting Data In 02-21-2023 0 1	0	1
Why won't new index take data but older ones will? I setup a new monitor on a Json file last week to add the contents to a new index. Once I got finished the new index... by DesertSocBum Explorer in Getting Data In 02-21-2023 0 0	0	0
File and Dir File Monitoring not working? Setup an app folder on my search head (clustered with indexers and HECS) "TA-Whatever" from the app builder. Droppe... by DesertSocBum Explorer in Getting Data In 02-21-2023 0 1	0	1
How to get parquet format data stored in S3 of AWS? I am trying to get billing data in s3.The data is in parquet format.I tried to get that data with "splunk add-on for ... by nus1704 New Member in Getting Data In 02-20-2023 0 0	0	0
Is it possible to create an if/else statement with the TRANSFORMS_ field into props.conf file ? I have data coming from a single sourcebut I want to send the events that match a REGEX to an index and all the other... by Zanusha443 Explorer in Getting Data In 02-20-2023 0 1	0	1
Associating index file to a sourcetype, regardless of source? I want any logfile (local, or remote via a UniversalForwarder) with the filename "xyz.log" to have a sourcetype of XY... by NK Path Finder in Getting Data In 02-20-2023 0 8	0	8
Cluster Master Send Internal Logs To Indexer Hi Splunk Community --I'm trying to ensure that my cluster master is sending internal logs to the indexer. Which dire... by Ne_phil Loves-to-Learn Lots in Getting Data In 02-20-2023 0 5	0	5
Timestamp of events is wrong after indexer reboot? Hello, I'm having a problem where the _time field of events does not match the actual events. This happened after I r... by dritjon Path Finder in Getting Data In 02-20-2023 0 3	0	3
it's possible balnce an hec source? Hi Folks, I have a question, I have 2 HF and I have to configure a hec source, I would balance the data across the tw... by aasabatini Motivator in Getting Data In 02-20-2023 0 5	0	5
Getting Microsoft Teams Data into Splunk? Hi, I`m following this article in an attempt to ingest Teams data into Splunk and I need some help with testing the w... by tomapatan Contributor in Getting Data In 02-20-2023 1 6	1	6
What is the role capability required to view all the indexes in splunk cloud settings? What is the role capability required to view all the indexes in splunk cloud settings? We have below capabilities in ... by mala_splunk_91 Explorer in Getting Data In 02-20-2023 0 13	0	13
How to delete password of inputs.conf from a modular input? Hello, I have created a modular input using the example of splunk-app-example. It extends the class Script and I modi... by ivan5593 Explorer in Getting Data In 02-19-2023 0 3	0	3
How to create this search? I need to create a search (or an embedded search that feeds data to another search. What I'm trying to get is a sear... by NanSplk01 Communicator in Getting Data In 02-17-2023 0 2	0	2
How to approximate pie chart percentage? Hello everyone, I want to change the percentage of pie chart to be integer I am using this to show the percentage ... by hagar71 Explorer in Getting Data In 02-17-2023 0 1	0	1
How to configure line breaker? Hola comunidad I'm trying to configure the props file so that the following event starts from the third line: Curre... by sgarcia Explorer in Getting Data In 02-17-2023 0 4	0	4
What is the file and variable in "Splunk Add-on AWS" for S3, that limits the ingestion of files to 1 hour? Hi, Please, Can some one let me know what is the file and variable in "Splunk Add-on AWS" for S3, that limits the ing... by acceo_purch New Member in Getting Data In 02-17-2023 0 1	0	1