Getting Data In

Community Activity

How to view status of indexing of evtx files in a folder I am using Splunk to review logs from disconnected systems. We have the users export the evtx files and send them to... by rockb Explorer in Getting Data In 10-05-2021 0 3	0	3
Output and deployment client configs constantly overwritten I have a single-instance Splunk setup with a handful of Universal Forwarders sending in data. There was previously a ... by whar_garbl Path Finder in Getting Data In 10-05-2021 0 3	0	3
Json datas selection and meta removal Hye.The situation : an instance of Splunk standalone (test platform), and an UF.The data : JSON Stream with multi le... by pck_npluyaud Explorer in Getting Data In 10-05-2021 0 3	0	3
How to parse logs with a mix of JSON and non-JSON Hi. I have log source that has a mix of various field types and then a larger nested JSON payload. I can't quite wr... by khenson Engager in Getting Data In 10-04-2021 0 4	0	4
path or logfiles location for 1500 servers Hey,We have some 1500 servers where splunk forwarders installed. we need the path to find location of data or logs co... by Mukunda7 Explorer in Getting Data In 10-04-2021 0 6	0	6
Impact of polling Dblogs from splunk every minute Hi,We use splunk Db connect to pull the DB logs.What will be the impact if we poll the DB every minute from splunk? I... by VijaySrrie Builder in Getting Data In 10-03-2021 0 0	0	0
udp input json to metrics - The metric event is not properly structured Hi, I am ingesting json data using log2metrics_json source type into a metrics index. Everything is working fine w... by imrago Contributor in Getting Data In 10-03-2021 3 0	3	0
Json key value mapping I have my splunk Jason in below format { [-] delete_me: True vendor: Dbruzy name: Rahul date: [ [-] 10-jan-2022 30-de... by vivekkumarkk Explorer in Getting Data In 10-02-2021 0 4	0	4
Forwarding data into indexer Hi,I have set up a Splunk Enterprise instance (version 8.2.1) and a Universal Forwarder instance on Docker on the sam... by wu_weidong Path Finder in Getting Data In 10-01-2021 0 1	0	1
Bringing Snowflake query history into Splunk Hi all, I'm interested in bringing Snowflake query history into Splunk and there are posts on how to do it with DBCon... by sdintino_splunk Splunk Employee in Getting Data In 10-01-2021 0 0	0	0
Windows events and %%something entries Hi.I'm using TA for Windows and everything is mostly working OK. But.In some events I'm receiving values likeReadOper... by PickleRick SplunkTrust in Getting Data In 10-01-2021 0 0	0	0
Wildcard ... not working in my stanza Hello All: I have problems with my application where I am configuring the following stanza in the inputs.config file ... by daymar_23 Explorer in Getting Data In 10-01-2021 0 1	0	1
Is it possible to use modular regular expressions defined in transforms.conf, in saved field extractions? I was trying to extract an ip address field. During a search, using\|rex "[[ipv4]]"works fine and creates an ip field.... by Xandervzyl Engager in Getting Data In 10-01-2021 0 1	0	1
Windows Performance counters inputs config question Hi, I have probably and easy question for the ones that have done this before. I have set up an universal forwarder t... by hethu Path Finder in Getting Data In 10-01-2021 0 2	0	2
data ingest size from a server how to identify data ingest size from a server per day... looking to find sizes of data ingested from each server fo... by jiaqya Builder in Getting Data In 09-30-2021 0 5	0	5
Does Windows Protected Event Logging work with Splunk? My company wants to set up Windows 10 Protected Event Logging for sensitive fields (currently this is only done for P... by MonkeyK Builder in Getting Data In 09-30-2021 1 3	1	3
How to extract fields from CSV I have a CSV file for ingestion like this. This needs to be monitored via inputs. I dont want to use INDEXED_EXTRACTI... by Naga Engager in Getting Data In 09-30-2021 0 3	0	3
_time need to be pick from log middle entry Hello All,Can any one help me on this event injection in Splunk. sample data122.0.0.2 NOT_AVAILABLE abc Agent= 2021-0... by snehal8 Path Finder in Getting Data In 09-30-2021 0 6	0	6
is it possible to send logs using opentelemetry to enterprise splunk Hi Team, i am doing set of poc to expolre splunk features, while doing so i am able to send data to splunk observabil... by vinothn Path Finder in Getting Data In 09-29-2021 0 0	0	0
Getting strange error in terminal - Raspberry PI OS - 32bit - universal forwarder Hi,I have setup the forwarder, however I get the following when I try to run commands:What am I missing and what woul... by Christians86 Explorer in Getting Data In 09-29-2021 0 1	0	1
Splunk Translation issues Good morning all, I am still new to Splunk configuration and was lucky enough to inherit a mostly functional setup. R... by Twagner79 Explorer in Getting Data In 09-29-2021 0 2	0	2
Syslog forwarding/routing with Heavy Forwarder is sending more logs than excepted Dear Splunkers, I am trying to forward a specific sourcetype (let's call it "mySourcetype") to a third party software... by davietch Path Finder in Getting Data In 09-29-2021 1 1	1	1
Can we enable WORM on SmartStore S3 buckets ? Does Splunk support enabling WORM on SmartStore S3 buckets ? by dm1 Builder in Getting Data In 09-28-2021 0 2	0	2
Any way to send events to two indexes (on the same indexer cluster) simultaneously ? Hi -I briefly need to ensure that events from one UF (multiple sources) are duplicated in two indexes on one index cl... by robgarner Path Finder in Getting Data In 09-28-2021 0 2	0	2
Ingesting Logs from Cisco Routing and Switching Gear Hi,I've been asked to add inputs to my organization's Splunk Enterprise from Cisco Routing and Switching Gear. I reme... by 603_Dan New Member in Getting Data In 09-28-2021 0 2	0	2