Getting Data In

Community Activity

Why does pretty-print JSON events get truncated? I have some events that exceeds the default 10000-byte TRUNCATE limit. This triggers "truncating line because limit ... by yuanliu SplunkTrust in Getting Data In 08-19-2021 0 2	0	2
Specific index forwarding to external index tier Hello, We have a requirement that certain indexes(SSO and SSO_Summary for this example) in our index cluster send to... by sonicZ Contributor in Getting Data In 08-18-2021 0 4	0	4
Splunk - Write data to Oracle Wondering if anybody is aware of any existing Splunk App or connector that has the ability to write Splunk query resu... by danielbb Motivator in Getting Data In 08-18-2021 0 1	0	1
Help Solving btool errors from alert_manager app All,I've started seeing the following error message on Splunk 8.2.1 since installing alert_manager app and I'd like t... by dpwtheitguy Loves-to-Learn Lots in Getting Data In 08-18-2021 0 3	0	3
Storing the correct host dimension with mcollect I've got some events I'm converting to metrics using mcollect with a scheduled report. Does anyone know how to get th... by JustinSC Explorer in Getting Data In 08-18-2021 1 2	1	2
Splunk Add-On for Windows I have the Splunk Add-On for Windows installed on my deployment server in order to help collect data from my windows ... by pc1 Path Finder in Getting Data In 08-18-2021 0 2	0	2
Splunk Add-On for Sophos Mac Compatibility Is the Splunk Add-On for Sophos compatible with getting data from my Macs? I have a deployment server (on Windows, th... by pc1 Path Finder in Getting Data In 08-18-2021 0 1	0	1
is CHECK_FOR_HEADER setting is deprecated ? getting below errors for continuously in splunkd.log. Is CHECK_FOR_HEADER setting is deprecated in splunk forwarder ... by chvenu17 Path Finder in Getting Data In 08-17-2021 0 3	0	3
One Search Head ignores props.conf One Does Not We have 3 clustered indexers and an original Search Head. Installed an app that has a custom props.conf on the Search... by dbray_sd Path Finder in Getting Data In 08-17-2021 0 9	0	9
parsing_err="No data" JSON Works in Add Data Wondered if someone can assist me, we're trying to send some log files from AWS in JSON format, coming over as an eve... by lavster Path Finder in Getting Data In 08-16-2021 0 2	0	2
How to send AWS and non-AWS logs from S3 bucket to Splunk Hello,We have a variety of different AWS logs (i.e. CloudWatch, Cloudtrail, Config, VPC Flow, Aurora) and non-AWS log... by adnankhan5133 Communicator in Getting Data In 08-16-2021 0 0	0	0
Splunk Cloud - props.conf setting for changing TZ to AEST for my events data in UTC format Hi All,I have the below sample events in my log data i.e. in UTC format , i want Splunk to change the event time to A... by rakesh_498115 Motivator in Getting Data In 08-16-2021 0 1	0	1
value pair input squid.conf Has anyone extracted the value pair squid.conf file to create a list of approve vs block URLs? Here is sourcetype tha... by youngsuh Contributor in Getting Data In 08-16-2021 0 1	0	1
Powershell Scripted input truncated in raw Hey Splunksters,I have a scripted input (powershell) that outputs correctly 6 fields on the screen like this:expirati... by spluzer Communicator in Getting Data In 08-16-2021 0 1	0	1
Splunk_TA_nix 8.3.1 is it supported for 7.3.X ? Splunkbase page for the app https://splunkbase.splunk.com/app/833/ says its supported for 7.3But the Release notes sa... by jonxilinx Path Finder in Getting Data In 08-16-2021 0 0	0	0
Windows Perfmon Process "% Processor Time" Hi,Having major issues with Perfmon collection. Values collected for "% Processor Time" (as well as privileged and us... by sini Explorer in Getting Data In 08-16-2021 0 0	0	0
Splunk Buckets Hi,I have one index(test0) in a standalone server. I'm trying to make3-month data searchableafter 6 months of data to... by vikramyadav Contributor in Getting Data In 08-16-2021 0 1	0	1
How can we deal with tables that don’t have a rising column? In DB Connect we have situations where we don’t have a rising column. What can we do in such cases? by danielbb Motivator in Getting Data In 08-15-2021 0 1	0	1
HEC only accepts TLS 1.2 no matter what sslVersions My data source can't seem to negotiate TLS v1.2. So, I am trying to "downgrade" HEC. But no matter how I change inp... by yuanliu SplunkTrust in Getting Data In 08-15-2021 0 7	0	7
DB Connect Failed processing http input Hi Splunkers I've tried to read some data from MS SQL Server. The data is json like. It works for a while and then I ... by m_zandinia Path Finder in Getting Data In 08-14-2021 0 1	0	1
syslog-ng systemctl not starting the service running CentOS 7 journalctl -fu syslog-ng shows Unit syslog-ng.service entered failed state. syslog-ng.service faile... by tthonest New Member in Getting Data In 08-13-2021 0 5	0	5
Event Processing Queues filling up leading to indexer stops completely All event-processing Queues are filled up suddenly leading to complete indexer stop over. All Connectivity is fine.... by mkrishnamoorthy Explorer in Getting Data In 08-13-2021 0 3	0	3
turn a columns with multiple entries into a chart Hello,I am pretty new to splunk, and just feel lost at times. I have a question that i cant seem to find an answer fo... by rite10privacy10 Explorer in Getting Data In 08-13-2021 0 7	0	7
PerfmonMk:CPU underreports _Total %_Processor_Time I track the overall CPU usage on a server with: index=mcadth_metrics host=IS20_DB sourcetype=PerfmonMk:CPU instance=... by gregorymountfor Explorer in Getting Data In 08-13-2021 0 0	0	0
Mcafee syslog-ng connection Good afternoon, I will like to set up Mcafee Epo to send data to syslog-ng. I have the Mcafee portion setup on to se... by junier16 Explorer in Getting Data In 08-13-2021 0 10	0	10