Getting Data In

Community Activity

In a trellis layout, how come the "split by" field is only showing "Aggregations"? I have some data which I have arranged in a table format, the names and [types] of which are as follows: error_type ... by jrico8 Engager in Getting Data In 11-05-2021 1 9	1	9
zScaler LSS Log Ingestion I have a set up a single-node test instance of Splunk to try and ingest zScaler LSS (not NSS) logs via a TCP input. H... by omranb Engager in Getting Data In 11-05-2021 0 0	0	0
serverclass.conf whitelist from pathname not working Hello,I've got a 100% Windows environment with a deployment server and I'm trying to configure server classes so we c... by justincoon New Member in Getting Data In 11-05-2021 0 1	0	1
help on custom sourcetype for log parsing Hello,I would like to reach out for some help in creating a custom sourcetype (cloned from _json), I'm calling it "ib... by freza Explorer in Getting Data In 11-05-2021 0 9	0	9
Universal Forwarder sending two sets of Windows Security Logs to two different indexer I need the Universal Forwarders to send Windows Security Logs to two different indexers but the data I want to send h... by minliang Loves-to-Learn Lots in Getting Data In 11-05-2021 0 5	0	5
Monitored txt file keeps re-indexing events PLEASE HELP!This has been driving me mad for days! Every time an event is added, its re-reading the text file from th... by ALXWBR Path Finder in Getting Data In 11-05-2021 0 2	0	2
SEDCMD Assistance Please Howdy All,I am looking for some assistance with a SEDCMD. I am trying to clean up some XmlWineventlog:security event... by pirsa Explorer in Getting Data In 11-05-2021 0 1	0	1
Do we need Universal Forwarder on Splunk server? Hi all,Maybe a dummy question, do I need to setup Universal Forwarder on Splunk server to monitor and index data? (so... by Cbr1sg Path Finder in Getting Data In 11-05-2021 0 4	0	4
How to reload changed configs at Heavy forwarder? Hi All,When I change some configs on HF, It seems that I need to restart HF according to the doc below.https://docs.s... by brandy81 Path Finder in Getting Data In 11-05-2021 0 5	0	5
Is there app for perforce log analysis ? HI I'm trying to use splunk for perforce log analysis. Is there any APP or existing custom app for the same ? by nagubandipavan New Member in Getting Data In 11-04-2021 0 3	0	3
Splunk Cloud Http Collector with Log4j2 Reviewing some docs to use Splunk Cloud (trial version) with a Java App with log4j2 I need to configure a Http Event ... by JPZamoraa New Member in Getting Data In 11-04-2021 0 1	0	1
DBConnect 3.2 error Error while saving schema to file: java.io.FileNotFoundException Hi all,When I was trying to setup a new connection in DBConnect 3.2, i got this error messagejava.sql.SQLException: E... by Cbr1sg Path Finder in Getting Data In 11-04-2021 0 7	0	7
Replace space in timestamp with a 0 (with datetime.xml possibly?) - Whitespace Padded Microseconds I have events that unfortunately use a space instead of a 0 in their timestamp field. The timestamp goes down to 6 d... by pestatp Path Finder in Getting Data In 11-04-2021 0 7	0	7
Mac OSX: Splunk Universal Forwarder not Being Received by Splunk Cloud We've recently started a Splunk Cloud instance, and are attempting to send data to it locally so we have all the step... by yourknightmares Explorer in Getting Data In 11-03-2021 0 6	0	6
Azure VM - Won't report to Deployment server Hey Splunksters,I have an Azure VM that I put a forwarder on that is supposed to reach out to my on-prem deployment s... by spluzer Communicator in Getting Data In 11-03-2021 0 5	0	5
Windows Host field inconsistant Last week a large portion of our Windows hosts reported in with a different "host" value. This is causing all sorts o... by Jhyde517 Loves-to-Learn in Getting Data In 11-03-2021 0 0	0	0
Where does windows get its host field from? I have a few windows machines Light Forwarding in to a central indexer, sending just WinEventLogs for now. For most h... by Jason Motivator in Getting Data In 11-03-2021 4 12	4	12
Splunk cuts off json field in search results Hello,I have been struggling with something that probably is common sense to experts. Part of the Splunk messages tha... by mnikolov2793 Observer in Getting Data In 11-03-2021 0 3	0	3
How to force timezone for AWS Add-On Inputs (like CloudFront) With the AWS Add-On for Splunk (version 5.0.3) we can pull logs from a CloudFront S3 bucket via the "Generic S3" type... by rewtroy Explorer in Getting Data In 11-03-2021 0 2	0	2
The timestamp has a one hour offset Hello,I am using "Splunk_TA_juniper" and I noticed a new problem with timestamp: there is a one hour offset for the t... by djoiret Explorer in Getting Data In 11-03-2021 0 4	0	4
Clean Forwarder fishbuckets for one sourcetype Hi - I have a command to clean fish buckets in a forwarder - if i want to take back in data for testing etc...cd var/... by robertlynch2020 Influencer in Getting Data In 11-02-2021 0 1	0	1
AWS Lambda to SplunkCloud log ingestion (No CloudWatch) Hi!What's the best strategy if I want my AWS Lambda logs get ingested directly to SplunkCloud? I don't want my Lambda... by skyebrenzo New Member in Getting Data In 11-02-2021 0 0	0	0
Network toolkit Hi All, I'm using network toolkit's external lookup ping for monitoring server down in my environment, but after incr... by sharmaa5 Engager in Getting Data In 11-02-2021 0 0	0	0
Monitoring/Forwarding data on the Splunk server itself My apologies if this question seems mundane or was answered elsewhere but I have searched to no avail. I am complete... by mercierj Explorer in Getting Data In 11-02-2021 0 7	0	7
Throttle condition is suppressing each result output i want to suppress alert for next 4 hoursi am trying to use throttle along with each result trigger conditionsplunk ... by rahulg Explorer in Getting Data In 11-02-2021 0 2	0	2