Getting Data In

Community Activity

	How do I clear 0s from the Ip? But the log says 017.002.100.103. I am receiving data from universal forwarder and I would like to remove 0 in front ... by noott211 Path Finder in Getting Data In 05-17-2022 0 3	0	3
	How can I get rid of this strange field delimiter and get fields "data" and "UID" correctly separated? Hi! Hope all are fine, and thanks in advance for any help I'm having problems ingesting Linux Audit Log. For some rea... by chthies Explorer in Getting Data In 05-17-2022 0 4	0	4
	How to create a new Sourcetype from Event Data not the raw data? Hi I am getting in the below data (green box in image). In green is the raw data and in purple is the event data. Th... by robertlynch2020 Influencer in Getting Data In 05-17-2022 0 2	0	2
	opentelemetry LOG Data over HEC - What are the best options? Hi I am new to OT, and I am struggling with a use case that I could really use some advice on, pleaseI have a test ca... by robertlynch2020 Influencer in Getting Data In 05-17-2022 0 0	0	0
	Creating Sourcetype form event data not data HiI am sending open telemetry Log data to Splunk.I am sending 3 different types of logs to one index and to one sourc... by robertlynch2020 Influencer in Getting Data In 05-16-2022 0 0	0	0
	Why am I losing data during transmission to Splunk Hello. Community help please. I can't figure out the problem with the data transfer to splunk. I have an index and da... by igor04653 Loves-to-Learn Everything in Getting Data In 05-15-2022 0 2	0	2
	Monitoring Exchange logs over CIFS Hello there.I'm having a performance problem. I have a "central UF" which is supposed to ingest MessageTracking logs ... by PickleRick SplunkTrust in Getting Data In 05-13-2022 0 0	0	0
	How to write a monitoring stanza to monitor the windows Event Viewer logs? Hi All, We have request from a Cybersecurity team to monitor the Windows Event Viewer logs in Splunk, my question is... by Hemnaath Motivator in Getting Data In 05-12-2022 0 4	0	4
	Why is Splunk is not parsing json output from scripted inputs? I'm fetching some data from API via a python script and passing it to Splunk. it's is not paring the JSON format. I'v... by vikramnain1995 Explorer in Getting Data In 05-12-2022 0 7	0	7
	How to configure checking interval for Nagios command in agent_config.yaml? smartagent/nagios:type: nagioscommand: xxxcollection_interval/interval/ scrape_interval???? by fongpen Path Finder in Getting Data In 05-12-2022 0 0	0	0
	Splunk Forwarder Unable to Connect to Target Folder Hi,I am currently facing an issue where my Splunk Universal Forwarder is able to establish connection with the Splunk... by Randall2022 Observer in Getting Data In 05-12-2022 0 7	0	7
	How to cofnigure multiple Nagios command in agent_config.yaml? Nagios — Splunk Observability Cloud documentatione.g:-smartagent/nagios:type: nagioscommand: first commandservice: "n... by fongpen Path Finder in Getting Data In 05-12-2022 0 0	0	0
	Db connect time problem- how to make event time and spunk time equal Hello, everyone! I configured source from my database via splunk db connect app. Events contain field "time" and I wa... by bosseres Contributor in Getting Data In 05-12-2022 0 0	0	0
	How to index .ini file? I have a Windows .ini file that I am wanting to index on every update of the file. Right now when the file is updated... by fredclown Builder in Getting Data In 05-11-2022 0 3	0	3
	Why events are not breaking/extracted properly? Hello, I completed a few UF based data ingestions and SPLUNK is getting events from those ingestions but have some is... by SplunkDash Motivator in Getting Data In 05-11-2022 0 7	0	7
	Why is LINE_BREAKER not working? I'm having some issues getting my LINE_BREAKER configuration to work for a custom log file. I've tested the RegEx and... by fitzgej_entrust Engager in Getting Data In 05-11-2022 0 2	0	2
	How to route and filter data from HEC? Hi Community, I have the need to filter data based on a specific field value and route to a different group of indexe... by martaBenedetti Path Finder in Getting Data In 05-11-2022 0 4	0	4
	How to do time extraction for HTTP Event Collector JSON logs? I have an HTTP Event Collector input collecting JSON data via syslog forwarder. The syslog-ng message looks like: b... by scottsavareseat Path Finder in Getting Data In 05-11-2022 0 1	0	1
	How to get Windows data into Splunk Cloud? Good Morning, I'm trialing Splunk Cloud in anticipation of a purchase. I have installed Splunk Enterprise as the depl... by theitgui Path Finder in Getting Data In 05-11-2022 0 22	0	22
	Help with configuration: How to use Regex to Normalize data? Dear All, I have a requirement to parse the data correctly. I am getting merged events and wants separate events for ... by ramprakash Explorer in Getting Data In 05-11-2022 0 15	0	15
	How to write a query that will fetch logs that will identify files that were deleted? Hi All, Some files has been deleted by someone from one of the server, I need to investigate on that. We only know t... by Vipin_Pavithran Explorer in Getting Data In 05-11-2022 0 1	0	1
	Syslog TCP port 514 or 6514- Having trouble connecting Endpoint Cloud to Splunk HF Hi everyone, Thanks for taking time in reading this and providing your knowledge , since i've been struggling a bit ... by Verxc5Beu Engager in Getting Data In 05-11-2022 0 2	0	2
	How to manipulate JSON before index? (Single/standalone instance of splunk) I have been in a fight with these events for over a week now. I was hoping eve... by oliverja Path Finder in Getting Data In 05-11-2022 0 3	0	3
	How to write these Props & transforms configuration? We have to filter the data which has Result=pass, status=200 and send the other logs to Splunk. we have received the ... by mounikad Explorer in Getting Data In 05-11-2022 0 6	0	6
	Splunk DB Connect 3.6.0 and MySQL- having trouble with inputs Hi! Im running Splunk DB Connect 3.6.0 on my HF (ver 8.0.9) and having some issues with one of my inputs. Im trying t... by martinborjesson Explorer in Getting Data In 05-11-2022 0 0	0	0