Getting Data In

Community Activity

How do I monitor Sage Accounting Software? I am trying to on board logs for Sage accounting software to Splunk, how do I go about it? I could not find any docum... by keen Loves-to-Learn Lots in Getting Data In 04-10-2022 0 0	0	0
Why is My automatic lookup not working with Searchhead cluster? I have an indexing cluster and searchhead cluster. I want to use a csv threat feeds to add IP reputation field using ... by aamer86 Path Finder in Getting Data In 04-09-2022 0 7	0	7
Why is Anonymize data not working? Hello, i am trying to anonymize data in forwarder using the below: The data AABC123456789012 needs to be transformed ... by vengisa Loves-to-Learn Lots in Getting Data In 04-08-2022 0 6	0	6
Create Windows UF Blacklist Literal Hyphen Character Hello, Many thanks in advance for taking the time to read/consider my question, it's always appreciated!I'm currentl... by cfloquet Path Finder in Getting Data In 04-08-2022 0 1	0	1
How to route window system logs to a different index Hey there, I have a windows forwarder sending the servers's application, system and security logs to the indexers. I ... by usup_rajbahak Path Finder in Getting Data In 04-08-2022 0 6	0	6
How to modify host and sourcetype at the same time When using HF to collect logs on the cloud，Because the add-on used cannot set host，So the host of the data is the nam... by legaldan Explorer in Getting Data In 04-08-2022 0 6	0	6
HttpPubSubConnection - Unable to parse message from PubSubSvr Can anyone help why this Warning message is coming in Splunkd log by Debottam New Member in Getting Data In 04-07-2022 0 1	0	1
Not able to get rid of EDT timezone using strftime command 2022-04-07 07:00:11.028-EDT, any suggestions? Not able to get rid of EDT timezone using strftime command 2022-04-07 07:00:11.028-EDT . Any suggestions by jimish Explorer in Getting Data In 04-07-2022 0 9	0	9
How to resolve "err=not_connected" error in Deployment Server configurations? Hi In the Deployment Server (DS): - I copied an app to the /opt/splunk/etc/deployment-apps/ In the Universal Forwa... by TiagoTLD1 Communicator in Getting Data In 04-07-2022 2 16	2	16
Is it possible to get all app insights data using data manager in Splunk cloud Victoria experience? Is it possible to get all app insights data using data manager in splunk cloud Victoria experience? by Vedhajanani Loves-to-Learn in Getting Data In 04-07-2022 0 0	0	0
Send Splunk Cloud Logs to s3 Archive after log retention in Splunk Cloud Hi All,I have to send Splunk Cloud logs to S3 buckets after the 90 days log retention in Splunk for audit purpose. Ca... by mthirumalareddy Explorer in Getting Data In 04-07-2022 0 1	0	1
Is there a way to test index-time operations without indexing logs? Is there a way to test index-time operations without indexing logs? For example, is there a way I can provide a sampl... by EatMoreChicken Explorer in Getting Data In 04-07-2022 0 5	0	5
How to export/import saved searches REST API Hi, I'm trying to found a way to export through the REST API my saved searches. Running the following command seems t... by mforgues Engager in Getting Data In 04-07-2022 0 3	0	3
Could someone aid with event field extractions and breaking? Hi Everyone, I am getting big single event through a python script from an API containing the performance data from a... by Splunk4 Explorer in Getting Data In 04-07-2022 0 5	0	5
How to Forward events to both our indexers and a syslog server? We have a requirement to send audit logs from our host servers (/var/log/audit/audit.log) to both our indexers and to... by giga444 Engager in Getting Data In 04-07-2022 0 1	0	1
Why are Services/processes missing from ps sourcetype query? I have Splunk_TA_nix installed and ps.sh enabled on my Apache storm nimbus instances. I can run a general ps sourcet... by bsg273 Path Finder in Getting Data In 04-07-2022 0 1	0	1
Why is IIS/Cisco add-on for Splunk not receiving data? I have installed, correctly configured and repeatedly check the settings for two apps to get data into Splunk however... by peteybfi Engager in Getting Data In 04-06-2022 0 2	0	2
Unable to get data into Splunk Cloud 1. I have installed universal forwarder and have a Splunk cloud account.2. On the laptop in universal forwarder, i do... by z080236 Explorer in Getting Data In 04-06-2022 0 8	0	8
How to split single line field value into multiple lines using regex? I have a field value in splunk with the below format :- field_X = "AB 012 - some text here! ---- HOST INFORMATION: ... by pavanae Builder in Getting Data In 04-06-2022 0 2	0	2
Why is no data getting into splunk cloud? 1. I have installed universal forwarder and have a Splunk cloud account. 2. Installed Splunk using this command /opt/... by bharath-boppid Loves-to-Learn Lots in Getting Data In 04-06-2022 0 1	0	1
Is it possible to deploy a universal forwarder that monitors the same log source twice and routes the data differently? Hello would it be possible to deploy a universal forwarder that monitors the same log source twice and routes the dat... by joshuasolman Loves-to-Learn Everything in Getting Data In 04-06-2022 0 5	0	5
Is there any splunk query to fetch vmware snapshots? is there any splunk query to fetch vmware snapshots ? VM snapshot was created 6 months ago during a change activity b... by Mohsin123 Path Finder in Getting Data In 04-06-2022 0 0	0	0
How to extract Date and time logged to different locations in the same file? Hello, I have a log file where the date is at the top of the log and the time for each event is at the start of each ... by NickyCarlisle Engager in Getting Data In 04-06-2022 0 5	0	5
Can Splunk ingest data from Salesforce Objects to create something akin to Salesforce reports? I'm wondering if Splunk can ingest data from Salesforce Objects (Account, Contact, Opportunity, etc) and use Splunk t... by loloffs Observer in Getting Data In 04-05-2022 0 1	0	1
How do you delete a custom sourcytype in Splunk Cloud? I know on prem you can delete the source type on the indexer, but how do you delete a sourcetype in a splunk cloud in... by levyj New Member in Getting Data In 04-05-2022 0 3	0	3