Getting Data In

Community Activity

Can I change TRUNCATE and MAX_EVENTS to unlimited ? I have large logs, with more than 10000 chars per line, and multiline events as large as whole XML file. They are alw... by mataharry Communicator in Getting Data In 12-06-2021 4 7	4	7
Exporting results from api search Hello, I am trying to export the results from an api search, currently I am using the curl command: curl -k -u user:p... by jmadsen1 Explorer in Getting Data In 12-06-2021 0 7	0	7
WMI and timestamp problems I'm pulling events from remote computers using WMI as described in the splunk docs. Everything seems to be going quit... by PickleRick SplunkTrust in Getting Data In 12-06-2021 0 0	0	0
How to discard extra text from a single line in events? Example: Mynameissachintendulkar .Except sachin I need to remove remaining all text .please help me with the query. T... by Kumar2 Loves-to-Learn Lots in Getting Data In 12-06-2021 0 5	0	5
Monitoring many files over CIFS At the beginning I want to say that I did search the forums and I saw the most typical responses like "use logrotate"... by PickleRick SplunkTrust in Getting Data In 12-06-2021 0 4	0	4
Unable to forward to indexer - cooked connection timed out Hi,I'm trying to forward data into my Splunk indexer, but when I do a "./splunk list forward-server", it shows up und... by wu_weidong Path Finder in Getting Data In 12-05-2021 0 0	0	0
How to get the host value from INDEXED_EXTRACTIONS = json How can I get the "host" value extracted from a JSON event with "INDEXED_EXTRACTIONS = json" into the events host fie... by Brett SplunkTrust in Getting Data In 12-05-2021 0 1	0	1
Unable to export millions of records Hello, When I search for sour type=Xxx for last 60 min window , I found millions of records, so I tried to export , t... by anil1432 Explorer in Getting Data In 12-05-2021 0 2	0	2
Exporting Reports Automatically to Specific Location Hi all,I am looking for an automated way to export reports on a recurring schedule and to a location other than the t... by mavilla Explorer in Getting Data In 12-03-2021 0 3	0	3
Timestamp and Universal Forwarder confusion I'm a bit lost. Every piece of info that I find on the web (as well as materials from the Splunk's own trainings) say... by PickleRick SplunkTrust in Getting Data In 12-03-2021 0 2	0	2
Behaviour of containerized universal forwarder on restart Dear all,despite my best efforts, I was not able to find satisfactory information. Thus I would like to ask if anyone... by zapping575 Communicator in Getting Data In 12-03-2021 0 0	0	0
syslog-ng to rsyslog Hi dear splunk community,Can someone help me to convert/translate the following syslog-ng config to the corresponding... by dmed Engager in Getting Data In 12-03-2021 0 4	0	4
Buckets naming convention for search factor in cluster Hello guys,rb_ are replicated buckets of db_ - impacted by replication factor.However how to identify search factor f... by splunkreal Influencer in Getting Data In 12-03-2021 0 1	0	1
Indexers with large number of indexes becoming unresponsive because of acceleration Known issue SPL-76956, http://docs.splunk.com/Documentation/Splunk/6.0/ReleaseNotes/KnownIssues#Data_model_and_Pivot_... by yannK Splunk Employee in Getting Data In 12-03-2021 4 4	4	4
How to raise the alert for sourcetype=netstat Hi Splunker, How can i Write the splunk query to show the state of a port for local address? The result of netstat i... by sarvesh_11 Communicator in Getting Data In 12-03-2021 1 3	1	3
Splunk Query to extract data from Json with escape characters Below is the part of log from which i need to extract data into tabular format in splunk dashboard.Payload:{<!-- -->\"commen... by Hema003 Engager in Getting Data In 12-03-2021 0 7	0	7
Rename host during indexing Hello everyone, i have the following question.In my environment i have 3 different UF where a scripted input is work... by klischatb Path Finder in Getting Data In 12-03-2021 0 2	0	2
Epoch Time - Time Stamp Assignment with Millisecs seperate in JSON I have some passive dns data that has time stamps that look like this in JSON logs:{"timestamp":"2021-10-21 16:31:01"... by jimdiconectiv Path Finder in Getting Data In 12-02-2021 0 5	0	5
Logs from Firepower not indexing in Splunk Hi All,We have two splunk environments 8.2, and I am in charge of these two. On the first environment, everything wor... by Hugo Engager in Getting Data In 12-02-2021 1 0	1	0
Search with where to filter based on wildcard variable Could you let me know why the results are not filtered (I hidden sensible data) with \| where NOT like (source, "%stim... by splunkreal Influencer in Getting Data In 12-02-2021 0 6	0	6
Data ingestion Hi all. I am ingesting a CSV file from a UF where the CSV is daily updated by the app team at a particular time and ... by krish5vuda Engager in Getting Data In 12-02-2021 0 1	0	1
When does start_from=newest catch up ? We've been experiencing latency and are trying to figure out ways to solve it. We forward events to a Windows Event ... by itrimble1 Path Finder in Getting Data In 12-02-2021 0 3	0	3
Event line breaker to index multi-line events into single event My current log monitoring splunk forwarder is indexing events in group (like sometimes more than 1 events together) b... by ssamant007 Explorer in Getting Data In 12-02-2021 0 5	0	5
How to configure 3rd party ssl-certificates to use them as public key? The certificate configuration tutorials have unfortunately left me with some lingering questions. Premise:They have t... by diegrens New Member in Getting Data In 12-01-2021 0 0	0	0
A number is added to log entries collected through universal forwarder using sourcetype syslog. Hi,I'm collecting syslog events from network to a dedicated universal forwarder using a TCP input on forwarder. In my... by rubenmuradyan Explorer in Getting Data In 12-01-2021 0 2	0	2