Getting Data In

Community Activity

Monitored txt file keeps re-indexing events PLEASE HELP!This has been driving me mad for days! Every time an event is added, its re-reading the text file from th... by ALXWBR Path Finder in Getting Data In 11-05-2021 0 2	0	2
SEDCMD Assistance Please Howdy All,I am looking for some assistance with a SEDCMD. I am trying to clean up some XmlWineventlog:security event... by pirsa Explorer in Getting Data In 11-05-2021 0 1	0	1
Do we need Universal Forwarder on Splunk server? Hi all,Maybe a dummy question, do I need to setup Universal Forwarder on Splunk server to monitor and index data? (so... by Cbr1sg Path Finder in Getting Data In 11-05-2021 0 4	0	4
How to reload changed configs at Heavy forwarder? Hi All,When I change some configs on HF, It seems that I need to restart HF according to the doc below.https://docs.s... by brandy81 Path Finder in Getting Data In 11-05-2021 0 5	0	5
Is there app for perforce log analysis ? HI I'm trying to use splunk for perforce log analysis. Is there any APP or existing custom app for the same ? by nagubandipavan New Member in Getting Data In 11-04-2021 0 3	0	3
Splunk Cloud Http Collector with Log4j2 Reviewing some docs to use Splunk Cloud (trial version) with a Java App with log4j2 I need to configure a Http Event ... by JPZamoraa New Member in Getting Data In 11-04-2021 0 1	0	1
DBConnect 3.2 error Error while saving schema to file: java.io.FileNotFoundException Hi all,When I was trying to setup a new connection in DBConnect 3.2, i got this error messagejava.sql.SQLException: E... by Cbr1sg Path Finder in Getting Data In 11-04-2021 0 7	0	7
Replace space in timestamp with a 0 (with datetime.xml possibly?) - Whitespace Padded Microseconds I have events that unfortunately use a space instead of a 0 in their timestamp field. The timestamp goes down to 6 d... by pestatp Path Finder in Getting Data In 11-04-2021 0 7	0	7
Mac OSX: Splunk Universal Forwarder not Being Received by Splunk Cloud We've recently started a Splunk Cloud instance, and are attempting to send data to it locally so we have all the step... by yourknightmares Explorer in Getting Data In 11-03-2021 0 6	0	6
Azure VM - Won't report to Deployment server Hey Splunksters,I have an Azure VM that I put a forwarder on that is supposed to reach out to my on-prem deployment s... by spluzer Communicator in Getting Data In 11-03-2021 0 5	0	5
Windows Host field inconsistant Last week a large portion of our Windows hosts reported in with a different "host" value. This is causing all sorts o... by Jhyde517 Loves-to-Learn in Getting Data In 11-03-2021 0 0	0	0
Where does windows get its host field from? I have a few windows machines Light Forwarding in to a central indexer, sending just WinEventLogs for now. For most h... by Jason Motivator in Getting Data In 11-03-2021 4 12	4	12
Splunk cuts off json field in search results Hello,I have been struggling with something that probably is common sense to experts. Part of the Splunk messages tha... by mnikolov2793 Observer in Getting Data In 11-03-2021 0 3	0	3
How to force timezone for AWS Add-On Inputs (like CloudFront) With the AWS Add-On for Splunk (version 5.0.3) we can pull logs from a CloudFront S3 bucket via the "Generic S3" type... by rewtroy Explorer in Getting Data In 11-03-2021 0 2	0	2
The timestamp has a one hour offset Hello,I am using "Splunk_TA_juniper" and I noticed a new problem with timestamp: there is a one hour offset for the t... by djoiret Explorer in Getting Data In 11-03-2021 0 4	0	4
Clean Forwarder fishbuckets for one sourcetype Hi - I have a command to clean fish buckets in a forwarder - if i want to take back in data for testing etc...cd var/... by robertlynch2020 Influencer in Getting Data In 11-02-2021 0 1	0	1
AWS Lambda to SplunkCloud log ingestion (No CloudWatch) Hi!What's the best strategy if I want my AWS Lambda logs get ingested directly to SplunkCloud? I don't want my Lambda... by skyebrenzo New Member in Getting Data In 11-02-2021 0 0	0	0
Network toolkit Hi All, I'm using network toolkit's external lookup ping for monitoring server down in my environment, but after incr... by sharmaa5 Engager in Getting Data In 11-02-2021 0 0	0	0
Monitoring/Forwarding data on the Splunk server itself My apologies if this question seems mundane or was answered elsewhere but I have searched to no avail. I am complete... by mercierj Explorer in Getting Data In 11-02-2021 0 7	0	7
Throttle condition is suppressing each result output i want to suppress alert for next 4 hoursi am trying to use throttle along with each result trigger conditionsplunk ... by rahulg Explorer in Getting Data In 11-02-2021 0 2	0	2
Prevent duplicates from generic S3 input I've set up a generic S3 input and it's working pretty well. However, I sometimes get duplicate events.I believe the ... by cbreezier Engager in Getting Data In 11-02-2021 2 1	2	1
Data is not getting parsed on HEC I have props.conf[source::tcp:7660]TRUNCATE=10000000LINE_BREAKER = {\"timeNO_BINARY_CHECK = trueSHOULD_LINEMERGE = fa... by rahulg Explorer in Getting Data In 11-02-2021 0 6	0	6
Lookup row delete Hi,I've added a new row to an existing lookup file for testing the query and now I need to delete the last couple of ... by Raghul_S Engager in Getting Data In 11-01-2021 0 1	0	1
Can you run multisite clusters with different OS? Hi, I wanted to ask if multisite Splunk clusters can run different Operating systems without any issues.For example, ... by fatemabwesnet New Member in Getting Data In 11-01-2021 0 4	0	4
Local Windows Event [WinEventLog://Application] Hi! I'm trying to collect the local splunk server Windows Application event logs. I would like them in non_XML form... by steveo2 Engager in Getting Data In 11-01-2021 0 0	0	0