Getting Data In

Community Activity

Why is multiline single event with sourcetype nginx:plus:kv intermittently showing? I am using the nginx app to ship nginx logs to Splunk, everything works well but intermittently I see a single event ... by rasikmhetre Explorer in Getting Data In 02-15-2022 0 1	0	1
Is it possible to ingest the events into two different HEC endpoints with Splunk forwarder? Splunk forwarder is running in the host and sending the audit logs to Splunk instances through HEC. Now i want to sen... by rsahoo Engager in Getting Data In 02-15-2022 0 2	0	2
How to activate forward-server? I am struggling to send data from remote machine to Splunk server due to lack of quality documentation. can anyone t... by jangid Builder in Getting Data In 02-15-2022 2 10	2	10
Splunk Add-On for ServiceNow not capturing all the selected tables Hi, We are trying to pull information from some of the database tables in ServiceNow into our Splunk Enterprise envir... by artelia Explorer in Getting Data In 02-15-2022 0 3	0	3
How to avoid monitored files being re-created often? Ehh, I have an annoying case. I'm monitoring a file over windows share (to make things even worse to troubleshoot is ... by PickleRick SplunkTrust in Getting Data In 02-15-2022 0 0	0	0
Why are multiline fields not parsed properly? I have below logs file i indexed with props below. type=PROCTITLE msg=audit(02/08/2022 15:00:01.749:4321) : proctit... by sivaranjiniG Communicator in Getting Data In 02-14-2022 0 2	0	2
How to change the default value of this display? When Settings> "Search, Report, Alert" is displayed in SplunkWeb, ○○○ is displayed by default. I want to change the d... by human96 Communicator in Getting Data In 02-14-2022 0 2	0	2
Is it possible to get concat fields through db connect? Hello. I need help with DB data input.Among the fields of the mariadb table, the field related to time is divided int... by ragonfly New Member in Getting Data In 02-14-2022 0 1	0	1
How to push the Japanese language in winevent log monitoring? Hello all, I have a Japanese language windows server from which I am testing to push the data to Tier1 index. However... by srinivas_gowda Path Finder in Getting Data In 02-14-2022 0 3	0	3
取得ログの一部が欠落するライセンスの利用状況を集計するため、FlexLMのログファイルを取り込んでいるのですが、一部の行が取り込まれない状態で原因究明にご助力頂けたら幸いです。ログ取得の意図としては下記記載のログ内容の"IN"、"OUT"行を行毎に1イベント... by Satoru_Aoyagi New Member in Getting Data In 02-14-2022 0 0	0	0
How to monitor a CSV files which is placed in a NFS file share? Hi All, We have request from end user for monitoring a CSV files which are placed in the file share folder and there ... by Hemnaath Motivator in Getting Data In 02-14-2022 0 2	0	2
Why are the logs not getting forwarded into the splunk instance via splunk forwarder? Hi We have installed Splunk universal forwarder on a remote server but logs are not getting forwarded to Indexer. I... by rahul2gupta Path Finder in Getting Data In 02-14-2022 0 4	0	4
Is it possible to set the certificate and private key for NICs with different FQDN? In your environment, one Splunk server has two NICs, each There is a different FQDN. In this case, is it possible to ... by human96 Communicator in Getting Data In 02-14-2022 0 3	0	3
Splunk DB connect onboarding Hi All,I have requirement to do splunk DB connect onboarding in a distributed environment, Do I need to install the s... by blbr123 Path Finder in Getting Data In 02-14-2022 0 9	0	9
inputs.conf monitor question Hi Community,I have a inputs.conf monitor that looks like this[monitor:///var/log/logfiles/.../app.log]index=englogss... by hank72 Path Finder in Getting Data In 02-11-2022 0 2	0	2
Where should I place temp files generated by my scripted input? I made a custom TA in "/opt/splunk/etc/apps/myTA/". I created a script called "myTA/bin/scripts/pulldata.sh". My scri... by EatMoreChicken Explorer in Getting Data In 02-11-2022 1 2	1	2
How to configure the Splunk universal forwarders on a Windows machine to send to an index that isn't the main? Hi All, i am trying to configure the splunk universal forwarders on a windows machine to send to an index that isnt m... by TrueMex New Member in Getting Data In 02-11-2022 0 10	0	10
How to Send LOG_TYPE data in Splunk using API python I am new to Splunk and my use case is to send a file to Splunk and then Splunk will parse it. Can someone please help... by test_accenture Loves-to-Learn in Getting Data In 02-10-2022 0 4	0	4
Why are CIM Data tables not populating from main index? Good morning to all, I have a newbie question. I know I’m missing something simple, wondering if someone could point ... by splunk4tg New Member in Getting Data In 02-10-2022 0 2	0	2
Event_breaker vs Line_breaker ? All, Is there any reason my event_breaker stanza for my UF should be different from LINE_breaker line on my indexer... by daniel333 Builder in Getting Data In 02-10-2022 1 5	1	5
Why does the Powershell script output empty values from second scheduled run? Hi All, I have a strange behavior with a scheduled Powershell script.The .ps1 script simply execute in a Try Catch st... by edoardo_vicendo Builder in Getting Data In 02-10-2022 1 3	1	3
How to match csv file with standard search Hi, I need your help  I have a standard query like this: index=a foo and I need to return only the record that m... by retziel New Member in Getting Data In 02-10-2022 0 1	0	1
How to enrich GeoIP at index time? I am sure this is a pretty common use case, mainly because IP addresses move, the data is not static so for security ... by BeefSupreme New Member in Getting Data In 02-09-2022 0 3	0	3
Ingesting Palo Alto logs from an external organization into our on-prem Splunk instance- best practices? Hello, We are in the process of ingesting Palo Alto logs from a separate organization’s network into our instance of ... by adnankhan5133 Communicator in Getting Data In 02-09-2022 0 1	0	1
Why is one transform overriding the other with my current configuration? Hey there, I have the following in my props.conf file: [tomcat-appl] TRANSFORMS-set = createsource, instance This ... by michael_sleep Communicator in Getting Data In 02-09-2022 0 13	0	13