Getting Data In

Community Activity

How to Send XML file logs to Splunk with this splunk-connect-for-kubernetes? Splunk connect for-kubernetes and I have been tryingto forward the XML file logs to splunk with this splunk-conne... by Dorai Loves-to-Learn in Getting Data In 04-14-2022 0 0	0	0
How to see the logs of the second forwarders logs? (Using two forwarders and one indexer) Hello there, I am working on VMware, I have two linux machines that I'm using as universal forwarders (ubuntu desktop... by aatik5u Path Finder in Getting Data In 04-14-2022 0 1	0	1
Why is cmd script not running? hi all, i try to run a cmd script on a UF. it's located in %SPLUNK_HOME%\etc\apps\log4jscan\bin\log4jscan.cmd and th... by pbnl Path Finder in Getting Data In 04-13-2022 0 2	0	2
Why is Splunkd not starting after a reboot, wih Systemd enable-boot start? We setup splunkd to autostart using systemd.-> https://docs.splunk.com/Documentation/Splunk/latest/Admin/RunSplunkass... by yannK Splunk Employee in Getting Data In 04-13-2022 0 1	0	1
Splunk indexer service: Why error "RHEL 7.1 systemd[1]: Failed to start SYSV: Splunk indexer service"? My Splunk indexer is not starting as a service on RHEL 7.1 on a fresh install.It's starting ok as splunk user though.... by lraynal Explorer in Getting Data In 04-13-2022 0 6	0	6
How to parse out asterisk delimited format? Hi! I'm having a struggle trying to get Splunk to recognize a file that's in Asterisk Delimited Format. I have the pr... by skirven Communicator in Getting Data In 04-13-2022 0 3	0	3
Why has source stopped indexing? hi, I have 2 source A and B (routers), they are sending the data over udp port 514. all of the sudden, the source B i... by heloma Engager in Getting Data In 04-12-2022 0 2	0	2
Enqueuing a very large file on HF Hi All, My setup is firewall are sending logs to Syslog server and heavy forwarder installed on syslog server itself... by bhsakarchourasi Path Finder in Getting Data In 04-12-2022 0 3	0	3
AWS Aurora Logs sending double-zipped to Splunk via AWS Add-on We're running into an issue using Add-On for AWS + SQS-based S3 inputs to pull Aurora logs from S3 buckets. The .gz d... by adnankhan5133 Communicator in Getting Data In 04-12-2022 0 0	0	0
How to avoid wrong timestamp with MAX_TIMESTAMP_LOOKAHEAD Hello, I have logs from Cisco ESA (emails) and some of them are logged in the futur. For example this log is marked ... by ctaf Contributor in Getting Data In 04-12-2022 1 16	1	16
Why am I unable to download a Universal Forwarder for Windows from splunk.com? I'm going to the page below and selecting Windows OS, I'm then redirected to the download page and it thanks me for d... by skoelpin SplunkTrust in Getting Data In 04-12-2022 0 9	0	9
Why is Microsoft Azure Add-on Not Pulling Logs? We're running Splunk 8.2.2 with the Microsoft Azure Add-on version 3.1.1. We have the add-on installed on a heavy fo... by pkohn117 Explorer in Getting Data In 04-12-2022 0 0	0	0
Log forwarding from HF to Cloud Hello, I am collecting logs from various endpoints via UFs into a Splunk HF. One of the data inputs is firewall logs ... by b_chris21 Communicator in Getting Data In 04-12-2022 0 1	0	1
Is there any way to find all the Splunk instances that has processed the event Please checkout the idea here (because I don't think currently it's possible with Splunk unless someone has some work... by VatsalJagani SplunkTrust in Getting Data In 04-12-2022 0 1	0	1
Adding additional fields at the Universal Forwarder: Why are apps are fighting over the _meta field? I have App_1 that is adding metadata in the inputs.conf file: ###### Forwarded WinEventLogs (WEF) ###### [WinEven... by oliverja Path Finder in Getting Data In 04-12-2022 0 10	0	10
How to optimize a heavy forwarder sending HEC data to index cluster? Hi I am running a heavy forwarder with HEC and it is sending data to 3 indexers. I am starting to read about ways to ... by robertlynch2020 Influencer in Getting Data In 04-12-2022 0 4	0	4
Why DBconnect inputs not detected after upgrade to 8.1 from 7.x? Hello All, We recently upgraded from 7.3. to 8.1. We had a few inputs in dbconnect that was upgraded from 3.1 to 3.8.... by secengineering Engager in Getting Data In 04-11-2022 0 0	0	0
Why am I getting an error in the HF logs and not able to see any latest events in the SH? Hi All, I am getting below error in the HF logs and not able to see any latest events in the SH. ERROR HttpInputDat... by thahir Contributor in Getting Data In 04-11-2022 0 0	0	0
Continuously updated log files are not being picked up by Splunk I have a set of long-running processes that are occasionally restarted. They generate a set of "heartbeat" events whe... by rchapman2x Explorer in Getting Data In 04-11-2022 0 1	0	1
Field extraction for custom waf log Hello everyone,I am struggling with extracting the fields of a custom WAF log file as there is no sourcetype that par... by b_chris21 Communicator in Getting Data In 04-11-2022 0 6	0	6
How to dynamically shrink hot/warm index size? Hello, Presently my hot/warm index occupies 50GB on disk (there are no limits specified in indexes.conf). I'd like to... by akazarov Path Finder in Getting Data In 04-11-2022 0 0	0	0
Why am I getting 404 on static files after having define root_endpoint in web.conf? Hello I've defined root_endpoint = /splunk in web.conf file. But now I'm getting 404 on /splunk/en-US/static/* files.... by nverducou New Member in Getting Data In 04-11-2022 0 3	0	3
How to change Time format in raw data to a readable format? Hi Team, I am getting date and time format as "Created_time =1649576166225" in raw log we have to convert. Please he... by splunkpri Explorer in Getting Data In 04-11-2022 0 4	0	4
Add-on GCP to ingest from Pub/Sub error 403- How do I fix? Dear Splunkers, I'm trying to get data from a Pub/Sub but i receive a 403 error. I configured the add-on in a HF, fol... by crazyTauron Engager in Getting Data In 04-11-2022 0 0	0	0
How to monitor the files under a path but not the details of each file? Hi All, Hope you all are doing well. Recently i was ingesting data to Splunk from a server and i had to get the fil... by niks987 Explorer in Getting Data In 04-10-2022 0 5	0	5