Getting Data In

Community Activity

Splunk Translation issues Good morning all, I am still new to Splunk configuration and was lucky enough to inherit a mostly functional setup. R... by Twagner79 Explorer in Getting Data In 09-29-2021 0 2	0	2
Syslog forwarding/routing with Heavy Forwarder is sending more logs than excepted Dear Splunkers, I am trying to forward a specific sourcetype (let's call it "mySourcetype") to a third party software... by davietch Path Finder in Getting Data In 09-29-2021 1 1	1	1
Can we enable WORM on SmartStore S3 buckets ? Does Splunk support enabling WORM on SmartStore S3 buckets ? by dm1 Builder in Getting Data In 09-28-2021 0 2	0	2
Any way to send events to two indexes (on the same indexer cluster) simultaneously ? Hi -I briefly need to ensure that events from one UF (multiple sources) are duplicated in two indexes on one index cl... by robgarner Path Finder in Getting Data In 09-28-2021 0 2	0	2
Ingesting Logs from Cisco Routing and Switching Gear Hi,I've been asked to add inputs to my organization's Splunk Enterprise from Cisco Routing and Switching Gear. I reme... by 603_Dan New Member in Getting Data In 09-28-2021 0 2	0	2
Cannot find bundles for search peer Hi, I'm deployed a single-site cluster with Master Node, Search Head and two Indexer. The architecture works fine, b... by p_vitale Explorer in Getting Data In 09-28-2021 0 4	0	4
Detect inactive index (Not Logging) Hi,Is there a way to determine if an index has stopped logging/has gone inactive? I have tried looking through the do... by tigawi Engager in Getting Data In 09-28-2021 0 6	0	6
How to use source file modification time instead of guessed date in events? Hello guys,how to use the source file modification date instead of "guessed" or extracted timestamp from csv file?I'm... by splunkreal Influencer in Getting Data In 09-28-2021 0 0	0	0
Made by Splunk Google Workspace Add-on was in beta now missing? Hi all,I was previously tracking a new Add-on that Splunk were developing for ingesting Google Workspace "audit" data... by Stu-eonnext New Member in Getting Data In 09-28-2021 0 1	0	1
Filtering WMI events on heavy forwarder Yes, I know that filtering was discussed many times here but my case is slightly different.I have a UF pulling events... by PickleRick SplunkTrust in Getting Data In 09-28-2021 0 2	0	2
how can i add some description at all input log (metric, syslog, snmp, etc...) how can i add some descriptions at all input log (metric, syslog, snmp, etc...) i tried, add "_meta = description::t... by melonking Observer in Getting Data In 09-27-2021 0 1	0	1
splunk forwarder takes only alert data from logs Hi i hope you will be fine.i need your help.i want splunk forwarder only take alert data from logs?how i can tell the... by hammad_yasir Loves-to-Learn Everything in Getting Data In 09-27-2021 0 4	0	4
Trouble indexing 'File Meta-Data' on Windows volume Hi@LukeMurphey , I am hoping you can help with your File Meta-Data addon that I am hoping is just what I need.I have ... by Highlander22 Engager in Getting Data In 09-27-2021 0 0	0	0
XML parsing is not working as expected, field values are truncating XML parsing is not working as expected, field values are truncating , tried changing truncate values in props but tha... by imsidrai Path Finder in Getting Data In 09-27-2021 0 4	0	4
How to get current status on the following Splunk query transaction command? Hi everyone, I have a question for following sample events. I am trying to group by job and provide two things curre... by Csingh Engager in Getting Data In 09-27-2021 0 19	0	19
Setting WORM in SmartStore Hello, Got a request from a customer who would like to archive and set WORM on the data. They did ask about Splunk S... by bobbyoommen Engager in Getting Data In 09-26-2021 1 1	1	1
Do you have any recommendations for freely available data, real or generated, that can be used to practice I know this is a niche and rookie question, but maybe someone out there can provide some guidance. I'm quite new to S... by Xandervzyl Engager in Getting Data In 09-26-2021 0 1	0	1
Data in SH Hello. I have 3 SH. When I switch the captain to another SHData disappears in it. In its normal state, SH has 20 mill... by gitingua Communicator in Getting Data In 09-24-2021 0 5	0	5
splunk cluster master node replacement Please assist to provide detailed steps to replace cluster master for the indexer cluster. I've tried few things howe... by bhilim Loves-to-Learn Lots in Getting Data In 09-24-2021 0 2	0	2
optimize/limit metrics data sent from forwarders We have a large number of Forwarders and would like to optimize the metrics data sent from them to the internal index... by henryfox Engager in Getting Data In 09-24-2021 0 3	0	3
Splunk Set Source Type format Timestamp strptime field examples Hi all,I'm trying hard to add data into Splunk from a .csv file instead of .json. I managed to convert it from .json ... by bogdan_nicolesc Communicator in Getting Data In 09-24-2021 0 2	0	2
Regex Help Hi,I have the below log entry, can you help with the regex to extract the line in Red. The regex i have is not workin... by SS1 Path Finder in Getting Data In 09-23-2021 0 2	0	2
Why does Splunk universal forwarder have high CPU usage on system? I added an app recently to pull in PowerShell Transcription logs that are output to C:\Logs\YYYYMMDD\YYYYMMDDHHSS.ran... by tkoster8 New Member in Getting Data In 09-23-2021 0 3	0	3
Is it Possible To Ingest Dell EMC Unity Storage logs? Hello Fellow Splunkers,I have been looking for a solution to ingest Dell EMC Unity 500 storage logs and my research h... by astackpole Path Finder in Getting Data In 09-23-2021 0 3	0	3
unique sourcetype appends a -2 Hello, We are using inputs.conf and props.conf to ingest a flat csv file. The issue we are having is the sourcetype n... by lbrhyne Path Finder in Getting Data In 09-23-2021 0 0	0	0