Getting Data In

Community Activity

How to route data with props and transforms over multiple HF? Hi Community, how to route data with props and transforms over multiple HF?Source A to Data Collector > IDX Cluster A... by CMEOGNAD Engager in Getting Data In 01-17-2023 0 4	0	4
How to filter dataset within a log index to a metrics index? Hello, I have an existing high volume index and have discovered a chunk of event logs within the index that would be ... by johnward4 Communicator in Getting Data In 01-17-2023 0 3	0	3
Can I loop through URL and http_referrer to find original request? Hi everyone, I'd like to see the flow from a given final URL, back to original URL the user typed. In my Web Proxy Lo... by bababou Explorer in Getting Data In 01-17-2023 0 8	0	8
How to plot timechart on elapsed time from json array object? Hi, I have an application(test.app) which invokes multiple downstream application apis(profile, payments etc) and w... by hungrykakarot Explorer in Getting Data In 01-17-2023 0 3	0	3
SQS based S3 input is skipping some objects from s3 but deleting the message from sqs? Hi We have a splunk add-on for aws to pull the logs from s3 bucket. we are using the sqs based s3 inputs created to ... by srinikrishna New Member in Getting Data In 01-16-2023 0 1	0	1
How to monitor DB connect activities? Hai All, Good day, we are using DB connect addon to pull logs from multiple DB"s and created several inputs we want ... by sekhar463 Path Finder in Getting Data In 01-16-2023 0 3	0	3
Resolve error: Splunk_TA_nix awk: record `HARD_DRIVES ssd2262 ...' too long? Hi Team, Using Splunk_TA_nix addon Version 8.4. While running below three scripts getting below Errors. Customer is ... by maharshidave Splunk Employee in Getting Data In 01-16-2023 0 1	0	1
Trying to route ECS container logs to Splunk but receiving error and task does not run Resourceinitializationerror: failed to validate logger args: Options "https://prd-p-88jca.splunkcloud.com:8088/servic... by saahil Loves-to-Learn in Getting Data In 01-16-2023 0 0	0	0
Why can't I see all data is received in HEC? Hello dear community Can you please advise me. My team is complaining that not all data comes from the HEC token from... by igor04653 Loves-to-Learn Everything in Getting Data In 01-16-2023 0 1	0	1
Splunk Not Receiving Logs From Splunk Forwarder or Syslog-ng what could be the issue with splunk enterprise? I have Splunk setup and it establishes connection with syslog and splunk universal forwarder from a remote server:I h... by tks_tman Explorer in Getting Data In 01-16-2023 0 7	0	7
JSON files are not being onboarded intermittently via SQS based S3 input? Hello All, We have issue wherein JSON files are not coming in intermittently into Splunk from a SQS based S3 input. T... by soumdey0192 Explorer in Getting Data In 01-15-2023 0 0	0	0
Is it best to ingest logs by parent path or each individual path? /var/logVS/var/log/messages/var/log/auth.log/var/log/boot.logetc, etc, etc by elsaddiq Engager in Getting Data In 01-13-2023 0 2	0	2
How to parse NSG Flow Log? Hi, I'm trying to onboard NSG Flow Logs and while I have managed to break the events into the specific tuples as per ... by Rhidian Path Finder in Getting Data In 01-13-2023 0 3	0	3
What is the strptime-style %-variable that TIME_FORMAT would use for subseconds? What is the strptime-style %-variable that TIME_FORMAT would use for subseconds? The docs for props.conf suggest the ... by dwaddle SplunkTrust in Getting Data In 01-13-2023 4 3	4	3
Why is inputs.conf meta not respected for Windows Event Logs on a 6.2.3 universal forwarder? I sometimes use the _meta capability of inputs.conf to add a meta field to the data when it makes sense to do so. For... by pj Contributor in Getting Data In 01-13-2023 2 4	2	4
What is the difference between a inputs.conf whitelist and dorp events with Props.conf and Transfroms.conf? Hi folks, I need a quick clarification, I need to know if I use a whitelist function on inputs.conf I will saving t... by aasabatini Motivator in Getting Data In 01-13-2023 0 3	0	3
UF status was not connected dashboard Hi All,we are working on to create a dashboard on UF status connection by using phone home interval in DS using searc... by sekhar463 Path Finder in Getting Data In 01-13-2023 0 2	0	2
Does anyone have an updated Lambda function for handling splunk-logging lambda & Cloudwatch logs? I have deployed a Lambda function from the "splunk logging" blueprint for collecting VPC Flow logs and Cloudwatch eve... by pobrien New Member in Getting Data In 01-12-2023 0 10	0	10
How to configure hot, warm, and cold buckets? Hello Splunkers , I have single machine splunk infrastructure. What stanzas I need to provide in indexes.conf for a i... by power12 Communicator in Getting Data In 01-12-2023 0 2	0	2
Splunk DB connect permission problem Hello everyone,I am trying to configure Splunk DB connect app, and getting next one error in logs:2023-01-12T14:46:28... by bosseres Contributor in Getting Data In 01-12-2023 0 1	0	1
What are best practices when the timestamp is an integer? Hi experts, have .CSV file that timestamp is quite a simple integer and its incremental like 1,2,3,,,, I want to k... by splunker-0625 Splunk Employee in Getting Data In 01-11-2023 0 1	0	1
AWS Add-on 6.3 errors with Generic S3 inputs We recently updated our AWS Add-on to version 6.3, after which all Generic S3 inputs stopped ingesting. Noticed the f... by steveski Explorer in Getting Data In 01-11-2023 0 0	0	0
Syslog UFs unable to connect to Indexers? We are currently experiencing an issue in our 9.0.2 environment where our syslog UFs are unable to connect to our ind... by nickcjohnson Loves-to-Learn Lots in Getting Data In 01-11-2023 0 1	0	1
Constant HIGH CPU/MEMORY USAGE- How can I bring this down? We have a stand alone Splunk v8.2.0 deployment. 16vcpu/32GB memory. From other posts here I started looking through t... by wpilcher New Member in Getting Data In 01-11-2023 0 0	0	0
Truncate only certain events from a source? Good day experts, to manage the ingestion volume, I need apply truncation to a source that sends pretty high volume o... by maxwee Engager in Getting Data In 01-11-2023 0 3	0	3