Getting Data In

Community Activity

How to Ingest Splunk Lines starting with Hello, how can I ingest logs starting with a specific word:Sample Log Entry:SPLUNKD-123456: Hello WorldHello World123... by whitefang1726 Path Finder in Getting Data In 02-07-2022 0 2	0	2
Microsoft Azure Add-on for Splunk - Almost a 30 day delay The Azure Add on seems to be working well with the exception of how behind it is. Specifically for the signins (sourc... by rpoiri101 Explorer in Getting Data In 02-06-2022 0 1	0	1
Index gzipped files without .gz extension Hi, I am trying to index gzipped files that do not have the .gz extension on a window universal forwarder. First ... by chris Motivator in Getting Data In 02-06-2022 0 3	0	3
Ping identity data from Cloud console to Splunk Hello Splunkers, has any one done getting ping identity ( SAS) data from from portal to Splunk On-prem if you have ... by velaunix Observer in Getting Data In 02-06-2022 0 0	0	0
Using HEC with props.conf and transforms.conf Hi there, I'm experiencing difficulty in discarding certain events while they're passing through my heavyweight forw... by gifkinsju New Member in Getting Data In 02-05-2022 0 3	0	3
Can I deny a specific sourcetype from receiving http event collector events? We have a team that are sending far too many wasteful logs to us for a specific sourcetype. It's going to take them ... by briancronrath Contributor in Getting Data In 02-04-2022 0 1	0	1
Can UF still forward data if license expire? Hello could you please help me to have better understanding of UF.Can we still use Splunk UF even after the end date ... by Naveen99 Engager in Getting Data In 02-04-2022 0 3	0	3
Which add-on for o365 and Azure log collection? Hi all,I am planning on integrating o365 and Azure cloud services to my Splunk on-prem environment.Now there are seve... by ojay Path Finder in Getting Data In 02-04-2022 0 3	0	3
Setup assistance - Panorama to UF with syslog-ng to Splunk Enterprise at AWS Hi all! I've always had a pretty straight forward approach to bringing in my Palo logs straight to an on-prem Search ... by BrendanCO Path Finder in Getting Data In 02-03-2022 0 16	0	16
Search api configuration to query another instance of splunk? https://docs.splunk.com/Documentation/Splunk/8.1.2/RESTTUT/RESTsearches i can see through search API provided by Splu... by nitsrini Loves-to-Learn in Getting Data In 02-03-2022 0 0	0	0
Injesting data through search api? Is there any way we can inject data to one running Splunk enterprise(on premise) to another through search API? I can... by nitsrini Loves-to-Learn in Getting Data In 02-03-2022 0 3	0	3
implications of changing the configurations of an indexed file Hi splunk community! Im new to splunk here so im not very clear on the consequences of updating indexes1. For example... by sophiacyh Explorer in Getting Data In 02-02-2022 0 1	0	1
Why I'm getting xmlwineventlog? Hello,I'm trying to get windows data from a couple servers. But instead of receiving wineventlogs I'm getting xmlwin... by cjaramilloc Explorer in Getting Data In 02-02-2022 0 1	0	1
Splunk Indexer Parsing Queue Blocking Hello,I just recently restarted my splunk enterprise instance in order to add an app and once it was back up, i notic... by ayeheyis Explorer in Getting Data In 02-02-2022 0 5	0	5
Is this a correct way to measure AWS CloudTrail ingest lag? Using the following search, I'm seeing AWS CloudTrail ingest lag between 4 and 9 hours. index=ibp_aws sourcetype=aws... by esalesap Path Finder in Getting Data In 02-02-2022 1 1	1	1
SC4S onboarding Hello,I am new to Splunk and working on getting SC4S setup correctly. My question is where do I setup the SC4S server... by blbr123 Path Finder in Getting Data In 02-02-2022 0 1	0	1
Data fields in Microsoft Office 365 Reporting Add-on for Splunk Hi,I have created an app in Azure given the permissions to the Office 365 management activity API and also created th... by robar_ismail97 New Member in Getting Data In 02-02-2022 0 0	0	0
Cannot forward one specific index between indexers I'm working on an indexer to try to forward all data ingested with IT Essentials Work + Splunk Add-on for Unix & Linu... by lenrigodoy Explorer in Getting Data In 02-02-2022 0 2	0	2
Tutorial Data upload Ive uploaded the Splunk tutorial data successfully into my Splunk enterprise instance. There is also a prices.csv.zi... by mrussell New Member in Getting Data In 02-01-2022 0 1	0	1
AS400 and Splunk Integration Hi Splunkers,Is it feasible to collect data from a DB2/AS400 server using Splunk?i.e. to collect required data which ... by sarahnazzar Explorer in Getting Data In 02-01-2022 0 4	0	4
wmi WQL query using hostname variable I am trying to get data into Splunk to show the members of the local / builtin windows groups. In particular "Adminis... by WinAdmin456 Engager in Getting Data In 02-01-2022 0 3	0	3
forward index to new index I inherited an old splunk environment where all data was indexed into the main index. I have setup a new environment ... by MasteringIT Explorer in Getting Data In 02-01-2022 0 3	0	3
Troubleshooting a file monitor on Universal Forwarder I currently have a Universal Forwarder running on a linux syslog server with a bunch of file monitors in place such a... by mike_k Communicator in Getting Data In 02-01-2022 0 10	0	10
Retrieving the "tag" and line "field" in docker logs (http collector / json format) Hi,I am using Splunk 8.2.1 and I have configured the docker daemon to send logs to Splunk via an HTTP collector.I hav... by bvivi57 Observer in Getting Data In 02-01-2022 0 1	0	1
How to add and parse XML data in Splunk? how parsing xml data ? <v8e:Event><v8e:Level>Information</v8e:Level><v8e:Date>2022-01-26T16:20:24</v8e:Date><v8e:App... by gitingua Communicator in Getting Data In 02-01-2022 0 1	0	1