Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
Hello Splunkers,I have a small question, what is the best practice (or for what reasons) should I use Syslog or TCP c...
by
GaetanVP
Contributor
in
Getting Data In
10-03-2022
|
0
|
8
| ||
|
Hello, I am new to the Splunk interface and I have been recently given a task to configure Splunk to monitor the foll...
by
sgutierrez
Engager
in
Getting Data In
06-17-2019
|
1
|
4
| ||
|
I ma trying to onboard the %SystemRoot%\System32\Winevt\Logs\Microsoft-AzureADPasswordProtection-DCAgent%4Admin.evtx ...
by
Dilsheer_P
Loves-to-Learn Lots
in
Getting Data In
12-26-2024
|
0
|
2
| ||
|
|
I have the following transforms.conf file:
[pan_src_user]INGEST_EVAL=src_user_idx=json_extract(lookup("user_ip_mapp...
by
Niro
Explorer
in
Getting Data In
01-03-2024
|
0
|
10
| ||
|
|
I need to use federated search which does not support search time lookup at this time in splunk 8.2.2.1.
I came acr...
by
patelmc
Explorer
in
Getting Data In
11-08-2021
|
0
|
2
| ||
|
|
I have syslog events being written to a HF locally via syslog-ng - these events are then consumed via file reader and...
by
Skins
Path Finder
in
Getting Data In
02-18-2024
|
0
|
3
| ||
|
|
Brand new to splunk, inherited a slightly configured system.
I want to move certain cribl events to an index called...
by
dtamburin
Engager
in
Getting Data In
05-13-2025
|
0
|
3
| ||
|
|
i have used this approach to forward logs from specific index to third-party system in my case Qradar
so i need...
by
KhalidAlharthi
Explorer
in
Getting Data In
06-09-2024
|
0
|
10
| ||
|
I've a few different automated pulls of data into directories of files I want splunk to index. These files get comple...
by
mjones414
Contributor
in
Getting Data In
03-29-2019
|
1
|
16
| ||
|
Hi all,
I'm struggling with an issue related to collecting Fortinet Fortios events through SC4S. If I use UDP proto...
by
Numb78
Explorer
in
Getting Data In
05-07-2025
|
0
|
3
| ||
|
I was trying to download the universal forwarder for windows 7 32 bit OS, but i can see only windows 8, 8.1, 10 OS. ...
by
twh1
Communicator
in
Getting Data In
04-01-2017
|
0
|
9
| ||
|
|
I'm attempting to set up an Independent Stream Forwarder on a RHEL machine to collect netflow data, and have it forwa...
by
Mit
Observer
in
Getting Data In
05-08-2025
|
0
|
1
| ||
|
|
Dear Splunk Community,
I am currently working on a project focused on identifying the essential data that should be...
by
kn450
Explorer
in
Getting Data In
05-10-2025
|
0
|
6
| ||
|
|
We've logs coming to HEC as nested JSON in chunks; We're trying to break them down into individual events at the HEC ...
by
nmohammed
Builder
in
Getting Data In
05-01-2025
|
0
|
12
| ||
|
|
Hi Folks,New to Splunk and SC4S deploymenet. So far I have been able to make good progress. I have setup 2 SC4S serve...
by
capjacksparo
Engager
in
Getting Data In
04-20-2025
|
0
|
5
| ||
|
|
Response Code: 401Response text: <?xml version="1.0" encoding="UTF-8"?><response><messages><msg type="WARN">call not ...
by
NatanS
Explorer
in
Getting Data In
08-17-2024
|
1
|
8
| ||
|
I have this kind of weird custom app (and dangerous too) that changes the UF Instance GUID. Basically, I created a ....
by
Na_Kang_Lim
Path Finder
in
Getting Data In
05-06-2025
|
0
|
1
| ||
|
|
I'm running into a strange issue where Splunk is using the current time for a HTTP Event Collector input rather than ...
by
Kieffer87
Communicator
in
Getting Data In
01-18-2019
|
1
|
10
| ||
|
Hello Splunk Community!
Welcome to the first post of the Splunk Answers Content Calendar
This week, I'll...
by
Anam
Community Manager
in
Getting Data In
05-06-2025
|
2
|
0
| ||
|
|
2025-05-06T13:50:00.857Z error helper/transformer.go:118 Failed to process entry {"otelcol.component.id": "filelog", ...
by
tawfiq15
New Member
in
Getting Data In
05-06-2025
|
0
|
1
| ||
|
|
Hi splunk community, I have a question on logs cloning/redirection
Purpose :
Extract logs containing "network-gue...
by
Nicolas2203
Path Finder
in
Getting Data In
04-17-2025
|
0
|
19
| ||
|
|
Hi,
After setting up a test index and ingesting a test record, I’m now planning to remove the index from the distri...
by
ws
Path Finder
in
Getting Data In
05-04-2025
|
0
|
3
| ||
|
|
How to onboard MOVEit Server Database logs which is hosted on prem to Splunk Cloud? What is the preferred method?
by
msatish
Path Finder
in
Getting Data In
05-05-2025
|
0
|
1
| ||
|
Hi,We have db connect connections & inputs created in Splunk HF. We see that it has status=FAILED sometimes and below...
by
juhiacc
Explorer
in
Getting Data In
05-02-2025
|
0
|
3
| ||
|
|
We have a universal forwarder and the customer has a csv file on this machine that he would like to ingest. The custo...
by
danielbb
Motivator
in
Getting Data In
05-02-2025
|
0
|
2
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Claim a $25 Cisco Store Gift Card
Help us improve the Splunk Community and complete our survey today!
Top Labels
-
add-on
2 -
administration
12 -
AIX
1 -
audit
1 -
blacklist
92 -
CLI
1 -
configuration
32 -
CSV
206 -
data
470 -
development
5 -
encryption
1 -
eval
2 -
field extraction
549 -
fields
5 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
931 -
host
154 -
HTTP Event Collector
433 -
index
538 -
indexer
702 -
indexing performance
1 -
inputs.conf
826 -
installation
5 -
intermediate forwarder
141 -
introduction
3 -
JSON
389 -
kvstore
1 -
Linux
450 -
login
1 -
Mac
30 -
metadata
1 -
metrics
2 -
modular input
187 -
monitor
308 -
monitoring console
1 -
other
47 -
proactive Splunk component monitoring
2 -
props.conf
968 -
regex
5 -
saved search
2 -
scripted input
242 -
search
1 -
search head
2 -
source
290 -
sourcetype
489 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
312 -
time
204 -
transforms.conf
572 -
troubleshooting
15 -
universal forwarder
1,539 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
16 -
whitelist
60 -
Windows
583 -
XML
90
- « Previous
- Next »
Get Updates on the Splunk Community!
October Community Champions: A Shoutout to Our Contributors!
As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...
Community Content Calendar, November Edition
Welcome to the November edition of our Community Spotlight! Each month, we dive into the Splunk Community to ...
Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!
What are Community Office Hours?
Community Office Hours is an interactive 60-minute Zoom series where ...
