Getting Data In

Community Activity

How to make my regex more efficient? Hi, I've exceeded my configured match_limit in limits.conf with this regex:"log":\s"(?<log_source>.?)\s(?<ISO8601>.... by ebs Communicator in Getting Data In 08-03-2021 0 4	0	4
Forwarding Search Results on a schedule I have a requirement to forward search results of a query to an indexer of an external organization. The volume of th... by dm1 Builder in Getting Data In 08-03-2021 0 3	0	3
Regex to extract for fqdn Hi - Was looking for some assistance in extracting the FQDNs from the paths below:/var/log/remote/ldap.inftech.net/20... by jaydee12 Engager in Getting Data In 08-03-2021 0 4	0	4
Novice question: transforming index and sourcetype for UDP/syslog I'm trying to use our Splunk environment as a replacement for an older syslog server. We have multiple indexers, and ... by dsmith Path Finder in Getting Data In 08-03-2021 1 5	1	5
F5 Syslog Load Balancing Hi,We setup an F5 VIP to load balance syslog input to several heavy forwarders on UDP 514. We're successfully receiv... by splunker52 New Member in Getting Data In 08-03-2021 0 5	0	5
Can wget be used instead of Curl to export data from Splunk using REST API ? I am in a unique situation where I want to use Splunk's REST API to export data to a third party system.Looking at th... by dm1 Builder in Getting Data In 08-03-2021 0 1	0	1
Unable to see Eval fields on GUI Hello Everyone,I have written props.conf in which i have added the below eval statementEval-appname="newapp"and other... by bhavneeshvohra Engager in Getting Data In 08-03-2021 0 1	0	1
Integrate Splunk and Azure Log Analytics what is the recommended way to integrate Splunk with Azure Log Analytics by rayar Contributor in Getting Data In 08-03-2021 0 0	0	0
Batch input not working. Please help troubleshoot it There is a csv file I had added to a a directory which HF monitors.That input is set as Batch input.Because there was... by dm1 Builder in Getting Data In 08-03-2021 0 4	0	4
UF on cloud servers to send log data to ON premise Splunk indexers Looking for a process if possible to send cloud server log data to ON Premise Splunk indexers.Searched but nothing so... by jcorcoran508 Path Finder in Getting Data In 08-02-2021 0 1	0	1
Forwarding windows event viewer logs to Splunk I have installed Splunk on a Linux box and is listening for incoming on 9997. Our linux boxes send its syslog to it a... by kkossery Communicator in Getting Data In 08-02-2021 0 8	0	8
How to restore frozen archived data, multiple buckets, months of data? I was recently asked to restore a couple months of data. After reading>>> https://docs.splunk.com/Documentation/Splun... by Glasses Builder in Getting Data In 08-02-2021 0 4	0	4
DateParserVerbose - Failed to parse timestamp Hi Splunkers,I am facing the below time stamp issues. Could you please help me with this issue.08-01-2021 22:49:25.56... by sharada Loves-to-Learn Everything in Getting Data In 08-02-2021 0 2	0	2
set indexes dynamically in inputs.conf I was able to set indexes dynamically in inputs.conf based off the source path folder name however, it seems like its... by sbattista Explorer in Getting Data In 08-02-2021 0 0	0	0
Securing Client side logging using HTTP Event Collector I am sending client side logs (browser logs) to Splunk. I have setup an HTTP Event Collector (HEC) where I am sending... by aliyusuf Engager in Getting Data In 08-02-2021 2 2	2	2
Wineventlog and Sysmon on split indexes using the same source (WinEventLog://ForwardedEvents) Hello everyone,I am collecting Windows Event Logs and Sysmon Logs from my Windows Domain to my WEF. From WEF using a ... by b_chris21 Communicator in Getting Data In 08-02-2021 0 4	0	4
JSON spath mvexpand Hi,{<!-- --> [-] advisories: [ [+] ] number_of_device: 1 os_name: ios os_version: 1234 status: checked}Above is m... by surekhasplunk Communicator in Getting Data In 07-31-2021 0 6	0	6
Query format for viewing server name with count on respect of color Hi Team, I am very new in Splunk and i need your help to change my query as per requirement Please validate my syan... by sushil_sh Engager in Getting Data In 07-31-2021 0 3	0	3
UF remote to on-prem Splunk Enterprise best practices We have several remote and traveling systems that we need to forward logs from to our on-prem Spunk environment. Splu... by mikefg Communicator in Getting Data In 07-30-2021 0 3	0	3
What's the best practice to get AWS data into the Splunk platform at scale? What's the best practice to get AWS data, such as VPC Flow, CloudWatch, CloudTrail, into the Splunk platform at scale... by akornhauser_spl Splunk Employee in Getting Data In 07-29-2021 0 4	0	4
How to drop events on a heavy forwarder? hi, I have a heavy forwarder configured this wayinputs.conf[udp://514]sourcetype = syslogindex = abcconnection_host =... by vinaypradhan Explorer in Getting Data In 07-29-2021 0 2	0	2
Preserve data on disconnected machine I have a few endpoints with forwarders that need to be disconnected from the network for periods of time (up to a mon... by robertjollsdrs Explorer in Getting Data In 07-29-2021 0 0	0	0
Splunk Linux TA - packages script, some hosts have time in the future I'm running what I believe to be a somewhat standard input, from the Splunk Linux TA. I just realized for some hosts... by splunk219783 Path Finder in Getting Data In 07-29-2021 0 2	0	2
Upgradation of Splunk for Symantec App Hi @gcusello ,We've been asked to upgrade our existing Splunk version(7.1.3) to 8.1. So for that we are now upgrading... by rahul2gupta Path Finder in Getting Data In 07-29-2021 0 3	0	3
not able to connect to splunk web console I am not able to connect to splunk web console using python sdk getting timedout error , I am suspecting port is not ... by skr Loves-to-Learn Lots in Getting Data In 07-29-2021 0 14	0	14