Getting Data In

Community Activity

	How to set at the same time in transforms.conf a new index and set a new metadata based on the host name? Hi, I need to set at the same time in transforms.conf a new index and set a new metadata based on the host name. New... by FrankFZ Engager in Getting Data In 04-26-2022 0 3	0	3
	Handling intermediary forwarders that are deployed as code Hi all, new to splunk, we are regularly burning down our heavy forwarders and as such the IPs change regularly. I nee... by OzUK Explorer in Getting Data In 04-26-2022 0 4	0	4
	How to create a dashboard studio chain search with dropdown token? Background I would like to create a dashboard with dropdowns that allow underlying queries to create chart to filter ... by anewuser Loves-to-Learn in Getting Data In 04-25-2022 0 2	0	2
	Indexing same file: crcSalt = not working as expected Hello everybody,I need to ingest into Splunk a CSV file containing an inventory of mobile devices. The HF that monito... by lpino Path Finder in Getting Data In 04-25-2022 0 2	0	2
	Why is windows log going to the wrong sourcetype? Logs are going to source= WinEventLog:Application and sourcetype="WinEventLog" instead of source="WinEventLog:Securit... by So76 Explorer in Getting Data In 04-25-2022 0 8	0	8
	How do I add a new role via REST API? Hi, How could I add a new role via REST API ? When I try to send the following HTTP POST via Postman: URL: https:... by davidtrujillo Explorer in Getting Data In 04-24-2022 0 3	0	3
	Why are JSON Wrapped Windows Logs not being read as JSON by "Add Data"? Hey, I'm very experienced using Splunk as an analyst, but not at all experienced on the admin side of things, but am ... by keenerms Engager in Getting Data In 04-24-2022 0 3	0	3
	How to get JSON response from Splunk web query? I need to get the JSON response for a Splunk API call for a data model. Is there a way to retrieve this information v... by matstap Communicator in Getting Data In 04-22-2022 0 2	0	2
	Missing "Message" field We are moving away from using Windows Event Collection to installing the Universal Forwarder on as many Windows machi... by wnyricsplunk Explorer in Getting Data In 04-22-2022 0 0	0	0
	How to write in props.conf so that the _time field takes time from the unixTime field? Hello colleagues, I would like to know I have events where there is a unixTime field. But the _time field does not sh... by gitingua Communicator in Getting Data In 04-22-2022 0 3	0	3
	Need help parsing and extracting MongoDB JSON log in Splunk Hi,I need some help.We have been using Splunk for MongoDB alert for a while, now the new MongoDB version we are upgra... by ychoo Observer in Getting Data In 04-22-2022 0 2	0	2
	Data Onboarding issue- unable to see the data in splunk Hello All, I have configured the inputs and props but unable to see the data in splunk. I have around 20 monitor stan... by blbr123 Path Finder in Getting Data In 04-22-2022 0 9	0	9
	Why is indexes.conf change not reflected in GUI without restart? I use Splunk Enterprise 8.0.4.1 In indexes.conf I have changed maxTotalDataSizeMB value. According to https://docs.sp... by jankowsr Path Finder in Getting Data In 04-21-2022 0 3	0	3
	Help with props.conf to detect timestamp Hello Splunkers, I have the following raw event.It was parsing with correct date and time until the daylight saving... by power12 Communicator in Getting Data In 04-21-2022 0 3	0	3
	How to monitor path in RHEL 8 but not RHEL 7? Hello I am using the Spunk_TA_nix and a server class to push that out to all nix boxes, but server class is not granu... by token2 Path Finder in Getting Data In 04-21-2022 0 4	0	4
	Error: WinRegistryMonitor::configure: Failed to get configuration settings: 'Regex: number too big in {} quantifier' I found many errors from _internal log ERROR ExecProcessor - message from "D:\SplunkUniversalForwarder\bin\splunk-reg... by nareerat_pr Explorer in Getting Data In 04-21-2022 0 3	0	3
	Why are none of the Perfmon inputs are sending Data Into Metrics Index and not showing errors? Hello, We're running into an issue with a UF sending data to a new metrics index under an app deployed by our deploym... by Razziq Explorer in Getting Data In 04-20-2022 0 6	0	6
	Why is splunk not forwarding on windows? Hello community Trying to figure out what is blocking/affecting UF on Windows Agent was installed using CLI msiexec.e... by fatsug Builder in Getting Data In 04-20-2022 0 17	0	17
	Cisco Firepower Estreamer Questions Hello, We want to onboard Cisco firepower devices and we can't decide between estreamer and syslog input. I would b... by sethion Observer in Getting Data In 04-19-2022 0 1	0	1
	Why is some data source indexed one hour in the future? Hi, Some data source is indexed one hour in the future (probably since TZ shift => twice a year hour change in France... by emallinger Communicator in Getting Data In 04-19-2022 0 2	0	2
	Splunk cannot find my file Hi, I have problem here, i already complete file transferring to Splunk server using cronjob. But unfortunately, all ... by amirulhusni99 Engager in Getting Data In 04-17-2022 0 1	0	1
	Insecure Cipher Suites on Splunk Indexer and Deployment Server We have got below vulnerabilities on Splunk servers, please help how to resolve itinsecure cipher suites:* TLS 1.2 ci... by ayush-choudhary Explorer in Getting Data In 04-17-2022 0 0	0	0
	What is the hot bucket max time? Hi All I'm very new to Splunk can someone help me after how many days the data will transfer from hot bucket to warm ... by debjit_k Path Finder in Getting Data In 04-14-2022 0 2	0	2
	How to Send XML file logs to Splunk with this splunk-connect-for-kubernetes? Splunk connect for-kubernetes and I have been tryingto forward the XML file logs to splunk with this splunk-conne... by Dorai Loves-to-Learn in Getting Data In 04-14-2022 0 0	0	0
	How to see the logs of the second forwarders logs? (Using two forwarders and one indexer) Hello there, I am working on VMware, I have two linux machines that I'm using as universal forwarders (ubuntu desktop... by aatik5u Path Finder in Getting Data In 04-14-2022 0 1	0	1