Getting Data In

Community Activity

How do I go about the integration with Global Relay? One of our clients is asking for a fresh integration with Global Relay as a replacement for ZL Archive, how do I go a... by spl_aficionado Path Finder in Getting Data In 07-08-2026 0 3	0	3
How to connect Splunk API with Trend Micro Apex One aaS? Hello!I try onboarding several Trend Micro Cloud Applications like Apex One as a Service but it just doesn't work. On... by avoelk Communicator in Getting Data In 07-08-2026 0 1	0	1
ClamAV 'Last Scanned' and 'Definition Date' not populating Good morning everyone, first time poster and very much a novice Splunk user.My colleague is currently having an issue... by jcanoy24 New Member in Getting Data In 07-08-2026 0 3	0	3
Splunk Add-on for Infoblox compatibility with Splunk & ES version 10 https://splunkbase.splunk.com/app/2934 is it compatible with Splunk enterprise & ES 10.0.4 even though it's archived.... by USA69 Explorer in Getting Data In 07-06-2026 0 7	0	7
HTTPOUT from an old Heavy Forwarder Hi all,I'd like to convert an existing, on prem, heavy forwarder to send it's data to a Cloud instance of Splunk usin... by e_v_m Observer in Getting Data In 07-03-2026 0 6	0	6
Questions regarding Universal Forwarder upgrade prerequisites, backup, downtime, and CLI authentication 1) What are the prerequisites and requirements for upgrading Splunk Universal Forwarder?2) We would appreciate it if ... by sri2splunk Explorer in Getting Data In 07-03-2026 1 2	1	2
Splunk UF is not connecting with Deployment Server Hii everyone,I have installed Splunk uf 10.0.5 on windows server 2016. The UF needs to connected to DS whose version ... by ankit13 Loves-to-Learn Lots in Getting Data In 07-01-2026 0 9	0	9
Add input Function to the Databricks App It would be great if you could extend the app with an input function. This would allow us to continuously retrieve da... by Josef Engager in Getting Data In 06-29-2026 0 1	0	1
Heavy Forwarder queue saturation for sending logs to Universal Forwarders Hello, I recently had to deploy a Heavy Forwarder in my infrastructure in order to perform transformations using a cu... by jeremieQuiviger New Member in Getting Data In 06-27-2026 0 3	0	3
How to trigger detection of new files, folders, or edited Excel files in a directory monitored by Universal Forwarder? Hi community, I am using a Splunk Universal Forwarder (UF) to monitor a specific directory on our server. I need to a... by sonaralt Engager in Getting Data In 06-27-2026 0 18	0	18
Can forwarder quickly reconnect after a network outage? Forwarder applies backoff setting (default 300 sec) based on following default settings ####### # Backoff Settings Wh... by hrawat Splunk Employee in Getting Data In 06-26-2026 2 2	2	2
Heavy Forwarder License I have 2 heavy forwarder on-prem and one of the HF says license is expired. I don't have a LM. I have a hybrid syste... by 709_miner Loves-to-Learn Everything in Getting Data In 06-25-2026 0 3	0	3
Cisco Security Cloud Estreamer Issues Good Afternoon,I have been at war with the estreamer app for 2 weeks and I can not get this to work. Below is the cur... by Rafaelled Explorer in Getting Data In 06-23-2026 1 2	1	2
MS Exchange Server integration: Version 2022 Hi,I want to integrate MS Exchange Server : Version 2022 using the below TA-Addon:Splunk Add-on for Microsoft Exchang... by 0xAli Path Finder in Getting Data In 06-23-2026 0 2	0	2
CiscoSecurityCloud TA 3.6.7 -eStreamer ingestion falling behind by several hours under high log volume from a single FMC We are using the CiscoSecurityCloud TA 3.6.7 to ingest firewall events via eStreamer from a single FMC that has 5 fir... by refahiati Explorer in Getting Data In 06-22-2026 0 0	0	0
Sophos xg firewall logs not parsed completely Hi Everyone, We have successfully integrated a Sophos XG Firewall with Splunk using Splunk Connect for Syslog (SC4S).... by ankit13 Loves-to-Learn Lots in Getting Data In 06-21-2026 0 2	0	2
10.2.4- Search Head unable to connect to Indexers After upgrading our distributed environment to 10.2.x (multi-site indexer cluster, RHEL 8), the Search Head suddenly ... by neelamsantosh Path Finder in Getting Data In 06-17-2026 4 1	4	1
TA_Guardium API Add-on for Splunk Hi All,I hope all is well.Kindly, anyone works with Guardium API Add-on for Splunk:https://splunkbase.splunk.com/app/... by 0xAli Path Finder in Getting Data In 06-17-2026 0 2	0	2
I have question about Metrics HelloI am working on the DynamoDB metrics, where I have found some metrics are available in the cloudwatch but not in... by avadhi New Member in Getting Data In 06-16-2026 0 1	0	1
Can I use a _meta variable from inputs in a transforms on the same heavy forwarder? Hi.I have a business requirement where I need to index data from multiple of our vendors that also use Splunk.The ven... by las Builder in Getting Data In 06-15-2026 0 16	0	16
CSV Lookup file containing NULL characters Hello,We are using a CSV lookup file in some of our searches. This file was the source of an error, throwing Error in... by Enzo54 Explorer in Getting Data In 06-15-2026 0 7	0	7
exclude winevent older than 7 days from ingest Hello,I am about to onboard 1000+ Windows UF. Those have windows event logs going back many years. Is there a way to ... by Andre_ Communicator in Getting Data In 06-15-2026 0 28	0	28
Moving to new forwarder I use the TA-oci-logging-addon and I have to migrate this add-on to a new server, but I'm not sure if it uses a check... by sirpatrick Explorer in Getting Data In 06-11-2026 0 2	0	2
Cisco Security Cloud Add_on vs. Splunk Add-On for Cisco ASA Onboarding Cisco FTD firewalls presents the choice of which Add-On to use. Apparently Cisco FTD firewalls run both AS... by kfsplunk Loves-to-Learn in Getting Data In 06-02-2026 0 3	0	3
PCAP Data contains media and audio file, Is it possible that can be converted to other format and ingest in splunk PCAP Data contains media and audio file, Is it possible that can be converted to other format and ingest in splunk by Hemant0808 New Member in Getting Data In 05-31-2026 0 4	0	4