Getting Data In

Community Activity

Sourcetype confusion over IIS logs- Help to find a cogent Spec and Select I have been doing testing and planning out my Splunk deployment. I have set up a Universal Forwarder on one of our pr... by kmower Communicator in Getting Data In 06-23-2022 0 5	0	5
How to monitor privileged commands in Windows? Meow~!How to monitor privileged commands in Windows?For example, in Linux I can by AuditD but what about Windows? by test_qweqwe Builder in Getting Data In 06-23-2022 0 4	0	4
Azure AD Add-on for MS Office 365 questions I am in the process of trying to configure a Tenant in this add-on. Some of the required values are available in the... by adamblock2 Path Finder in Getting Data In 06-23-2022 1 8	1	8
How to compare json file and find the difference in log file? How to compare difference in the json file. If there is no difference we are good. But in my case i need to find comp... by karthi2809 Builder in Getting Data In 06-23-2022 0 5	0	5
How to add Python modules into Splunk environment for network path monitoring? Hi All, I am trying to monitor files and folders in network path using a basic (only the outline) Python script shown... by Varsha995 Loves-to-Learn in Getting Data In 06-23-2022 0 0	0	0
Correlation-Indexed Fields, Indexed Time Field Extraction, HF/UF, Deployment Server, and Performance Hello,I was trying to find out the correlation among Indexed Fields, Indexed Time Field Extraction, HF/UF, Deployment... by SplunkDash Motivator in Getting Data In 06-22-2022 0 9	0	9
How to achieve multiple timestamps in single log file? I am onboarding data from trend micro portable security via HEC. As per the documentation of trend micro it needs 5 i... by bhavneeshvohra Engager in Getting Data In 06-22-2022 0 1	0	1
How are Splunk passwords encrypted in inputs.conf and outputs.conf? Could someone please document how the Splunk passwords are encrypted (in inputs and outputs.conf) so that we can setu... by samlll42 Explorer in Getting Data In 06-22-2022 5 10	5	10
Updated DB Connect, now my connections don't work; MS-SQL Server Using MS Generic Driver With Kerberos Authentication Splunkers,I just updated my app db_connect. Now all my connections are broken. I think they are forcing ssl now and t... by spctravis Explorer in Getting Data In 06-21-2022 0 1	0	1
Does anyone knows how to map the field values from Splunk to Siemplify? We use Siemplify add-on to ingest alerts from Splunk to Siemplify however, the fields in Siemplify come really horrib... by pagnihot Path Finder in Getting Data In 06-21-2022 0 0	0	0
Can not extract value with whitespace at index time Hello, I have a not ideal log, looking like this, for example:"field1=value1" "field2=val ue 2" "field3=value3" And ... by sebastian_pribn Engager in Getting Data In 06-21-2022 0 4	0	4
What is the time stamp the syslog daemon writes to the syslog file? When the syslog daemon writes to the syslog file, what is the time stamp it writes? is it the host date/time or the e... by danielbb Motivator in Getting Data In 06-21-2022 0 1	0	1
Why when applying Props.conf, HF suddenly stops? Hello all, We are using an RSyslog to write logs to file in a Heavy Forwarder but we found that it was escaping tabs ... by ivan5593 Explorer in Getting Data In 06-21-2022 0 1	0	1
How do we forward Tripwire logs to Splunk? we have question once we need to forward the Tripwire logs to Splunk and I already enable the syslogs on the tripwir... by Abdulrahman New Member in Getting Data In 06-21-2022 0 0	0	0
Splunk to activeMQ - does anyone have a feedback to share on that ? Hello, I'm trying to experiment sending data indexed in splunk to activeMQ. I'll probably need to use JMS Messaging M... by emallinger Communicator in Getting Data In 06-21-2022 0 0	0	0
CVE-2022-32158 - Can I just upgrade the deployment server to version 9.0 in a Splunk Cluster environment? Can I just upgrade the Splunk Enterprise deployment to version 9.0 in a Splunk Cluster environment? by mokabe New Member in Getting Data In 06-21-2022 0 5	0	5
How to find unencrypted passwords in my logs by using one anchor pattern? Hi All, I was trying to find the unencrypted passwords in my logs by using one anchor pattern. After getting the pass... by Kk Path Finder in Getting Data In 06-20-2022 0 0	0	0
Route data to specific indexer based on an external mapping table Hello everyoneI'm fairly familiar with routing data based on the logs themselves, however, I was wondering if there w... by jldgomes Engager in Getting Data In 06-17-2022 0 2	0	2
vulnerability CVE-2022-32158 16_06_2022 versions before 9.0 Splunk Hello,I see that there is a new vulnerability that affects Splunk and I have a couple of doubtshttps://www.splunk.com... by splunkcol Builder in Getting Data In 06-16-2022 0 5	0	5
What is the number of indexers allowed in a single site cluster? Hello Splunkers I have a query regarding number of indexers or indexer clusters that can reside in a single site clus... by venky1544 Builder in Getting Data In 06-16-2022 0 4	0	4
Splunk Data Manager support for Microsoft GCCH cloud We are trying to ingest data from our Microsoft GCCH Azure cloud with the "Microsoft Azure Add-on for Splunk" with mi... by jakinder New Member in Getting Data In 06-16-2022 0 0	0	0
Getting Data in from SYSLOG / File Monitor- Am I missing something? Hello We are running Enterprise 8.2.6 (Windows Server). We use a product called Fastvue Syslog Server on another Win... by dasadmin Explorer in Getting Data In 06-16-2022 0 4	0	4
Fschange directory \•••\ not working Current one that is working is:[fschange:F:\bau\box\quest]Need to specify it to:[fschange:F:\bau\box\quest\...\arch]W... by Shadolu Explorer in Getting Data In 06-16-2022 0 0	0	0
How to split data to multiple indexes on the same indexer (index1,index2) from one input source from one Heavyforwarder Hi,Could you please let me know How to split data to multiple indexes on the same indexer (index1,index2) from one in... by vksplunk1 Explorer in Getting Data In 06-15-2022 0 8	0	8
Newly added monitor not being ingested in Splunk Hi all,I added a new monitor for a log file in inputs.conf and there were no errors in splunkd.log.However, it is not... by zijian Explorer in Getting Data In 06-15-2022 0 1	0	1