Getting Data In

Community Activity

Splunk Query to extract data from Json with escape characters Below is the part of log from which i need to extract data into tabular format in splunk dashboard.Payload:{<!-- -->\"commen... by Hema003 Engager in Getting Data In 12-03-2021 0 7	0	7
Rename host during indexing Hello everyone, i have the following question.In my environment i have 3 different UF where a scripted input is work... by klischatb Path Finder in Getting Data In 12-03-2021 0 2	0	2
Epoch Time - Time Stamp Assignment with Millisecs seperate in JSON I have some passive dns data that has time stamps that look like this in JSON logs:{"timestamp":"2021-10-21 16:31:01"... by jimdiconectiv Path Finder in Getting Data In 12-02-2021 0 5	0	5
Logs from Firepower not indexing in Splunk Hi All,We have two splunk environments 8.2, and I am in charge of these two. On the first environment, everything wor... by Hugo Engager in Getting Data In 12-02-2021 1 0	1	0
Search with where to filter based on wildcard variable Could you let me know why the results are not filtered (I hidden sensible data) with \| where NOT like (source, "%stim... by splunkreal Influencer in Getting Data In 12-02-2021 0 6	0	6
Data ingestion Hi all. I am ingesting a CSV file from a UF where the CSV is daily updated by the app team at a particular time and ... by krish5vuda Engager in Getting Data In 12-02-2021 0 1	0	1
When does start_from=newest catch up ? We've been experiencing latency and are trying to figure out ways to solve it. We forward events to a Windows Event ... by itrimble1 Path Finder in Getting Data In 12-02-2021 0 3	0	3
Event line breaker to index multi-line events into single event My current log monitoring splunk forwarder is indexing events in group (like sometimes more than 1 events together) b... by ssamant007 Explorer in Getting Data In 12-02-2021 0 5	0	5
How to configure 3rd party ssl-certificates to use them as public key? The certificate configuration tutorials have unfortunately left me with some lingering questions. Premise:They have t... by diegrens New Member in Getting Data In 12-01-2021 0 0	0	0
A number is added to log entries collected through universal forwarder using sourcetype syslog. Hi,I'm collecting syslog events from network to a dedicated universal forwarder using a TCP input on forwarder. In my... by rubenmuradyan Explorer in Getting Data In 12-01-2021 0 2	0	2
Remove double quotes from the middle , but not from the last . I have an issue to remove the double quotes from the middle of a string. Example below "My Name "is Ethan".Here i wan... by ethanthomas1 New Member in Getting Data In 11-30-2021 0 1	0	1
Phantom Integration with splunk Hi,I am using Distributed Splunk Enterprise Deployment (at Phantom end) to ingest phantom logs into splunk. CORE SIT ... by VijaySrrie Builder in Getting Data In 11-30-2021 0 0	0	0
Gsuite For Splunk can't receive login report After I set up the configuration and setting on the Gsuite app in Splunk.it's able to collect the different audit log... by leo0706 New Member in Getting Data In 11-30-2021 0 0	0	0
Split matched data to two indexes which is on one as of now Hi SMEs,We need to split event logs into 2 different indexes (index_1 & index_2) which is coming to index_1 only as o... by pavanbmishra Path Finder in Getting Data In 11-30-2021 0 2	0	2
How do we delete old data for only three files in the one index ? we need to delete three files from the index I have used the \|delete command to clean the indexed data and it’s delet... by kiranpanchavat1 Path Finder in Getting Data In 11-30-2021 0 6	0	6
Syslog -> 2 different Regex -> different destinations each Hello,I have been trying to get a Splunk config to work for a while, and have come here for help! I'm out of ideas. I... by RyanH Loves-to-Learn in Getting Data In 11-29-2021 0 5	0	5
TrendMicro deepdicovery app settings Hello Team,I am trying to setup the TrendMicro DeepDiscovery app to process the DDA/DDI events. I also have TrendMicr... by bbiswabhusan Explorer in Getting Data In 11-29-2021 0 0	0	0
Can Splunk be used to log Jabber instant messages I'm responsible for a Cisco IM & Presence system. It can support logging of messages to an external SQL database or ... by osoares4 Explorer in Getting Data In 11-29-2021 0 5	0	5
Palo Alto App Hi AllHoping someone can help me, I am trying to get the Palo Alto App working we are a Splunk cloud customer and hav... by the_rains Engager in Getting Data In 11-29-2021 0 0	0	0
CEF Format parsing We have logs coming in from one of the source in CEF format. How to deal CEF Format data parsing in Splunk so that i... by pavanbmishra Path Finder in Getting Data In 11-28-2021 0 1	0	1
Filtering based of Nested JSON objects Hi,First question here - apologies if it's obvious or basic!I am trying to parse a nested list and find specific poli... by nicovibert Engager in Getting Data In 11-28-2021 0 3	0	3
Metric event data with an invalid metric value cannot be indexed. How to troubleshoot I'm trying to fetch windows perfmon data using below input stanza but not receiving any data and I could see the erro... by Anuj New Member in Getting Data In 11-27-2021 0 1	0	1
Splunk Add-on for Microsoft cloud services Guys, could you please shed some light here?I have configured azure api management to stream events to event hub and ... by Knightrider1234 Explorer in Getting Data In 11-27-2021 1 6	1	6
HttpEventCollectorLogbackAppender - How do I configure it to verify certs? I can send events to Splunk cloud and Splunk Enterprise servers with HttpEventCollectorLogbackAppender, but with SSL ... by MikeSplunkHEC Engager in Getting Data In 11-26-2021 0 1	0	1
How do I convert the encoding to UTF-8 format? My security device cannot set the data type to be transmitted. How can I convert these data? Something like this:\xB0... by 7SnhA Observer in Getting Data In 11-26-2021 0 0	0	0