Getting Data In

Community Activity

Universal Forwarder I have to forward my data from my machine to serval using universal forwarder. What should be the content of inputs.c... by akankshayadav Path Finder in Getting Data In 07-11-2021 0 8	0	8
configuring data input collection error Hi all,I'm trying to configure log collection from local machine, but this error keeps coming up once I try to submit... by limelime New Member in Getting Data In 07-10-2021 0 0	0	0
How do I upload a csv file and then it will generate a separate chart instead of adding to an existing chart? I want to upload several csv files and I hope that each csv file can be a separate chart instead of adding to an exis... by LMN007 Engager in Getting Data In 07-10-2021 0 3	0	3
Move data from old Splunk 6.3.2 to New Splunk 8.1.3 help Hello everyone, I have been trying to move data from my old 6.3.2 splunk to the new 8.1.3 splunk which is empty. I tr... by akballow New Member in Getting Data In 07-09-2021 0 1	0	1
Can we apply multiple time settings via props for same feed Hi All,Have seen a few options for the issue I have, but wanted to know if Splunk can handle applying multiple props.... by MKozanic Path Finder in Getting Data In 07-09-2021 0 5	0	5
How can I ingest windows logs that were backed up Prior to a customer getting splunk, they 7-zipped there logs and copied them to a server. I just got them a brand ne... by Funderburg78 Path Finder in Getting Data In 07-09-2021 0 5	0	5
REgex to mask half of the data in splunk Can someone help me with th regex to put in props.conf file to mask the data as below . Except the first three letter... by ethanthomas Path Finder in Getting Data In 07-08-2021 0 2	0	2
Monitor Files and Directories - configured - but nothing is indexing ? File Monitor configured - but nothing is indexing ?here is my inputs.conf [monitor://C:\xxxx\xxxxxx\xxxxxxx\xxxxx.doc... by Alfred Explorer in Getting Data In 07-08-2021 0 1	0	1
How to truncate a field or limit a field value I have a field called org_name in the data as below Org_name="davidcareerhome"Org_name ="Ethanfurniture"I want to li... by ethanthomas Path Finder in Getting Data In 07-08-2021 1 1	1	1
Timestamp extraction failed if no INDEXED_EXTRACTION=json on props.conf Hello,On a monoinstance Splunk, I'd like to ingest some simple JSON data : { GDH: 2021-07-08 16:54:00.617222 ... by emallinger Communicator in Getting Data In 07-08-2021 0 2	0	2
Adding custom logs from Event Viewer stanza Anybody has experience with adding custom logs from Event Viewer to inputs.conf?Is it enogh to put stanza:[WinEventLo... by marcoatto New Member in Getting Data In 07-08-2021 0 2	0	2
Filtering Windows Events using XML in inputs.conf Somobody has experience with filtering (supressing) Windows event using XML in Splunk inputs.conf?So I have XML to fi... by marcoatto New Member in Getting Data In 07-07-2021 0 1	0	1
Cisco Secure eStreamer Client Autolookup estreamer_fw_action commented out After updating our TA we realized the action field autolookup wasn't working anymore. Digging through the TA I see in... by elee_splunk Loves-to-Learn Everything in Getting Data In 07-07-2021 0 2	0	2
Splunk App for infrastructure entities by role Hey! I am trying to install Splunk App for infrastructure on our distributed Splunk platform and I was wondering we w... by tommerraz New Member in Getting Data In 07-07-2021 0 1	0	1
Adding new threat list feed into splunk Hello all, I am having issues with adding AlienVault OTX as a intelligence feed into splunk. At first, when i didn'... by astatrial Contributor in Getting Data In 07-07-2021 1 5	1	5
How to view pdf as splunk dashboard I generated reports for a certain dataset from splunk and saved it as a pdf, now in future I wish to import that same... by rai4shambhavi Explorer in Getting Data In 07-07-2021 0 1	0	1
Unable to forward syslog from NetScaler Service VMs (SVMs) We have asked our customers to forward syslog from Netscaler Service VMS (SVMs) to our Splunk syslog servers. We have... by splunkrocks2014 Communicator in Getting Data In 07-06-2021 0 1	0	1
Microsoft Teams Ingestion Hello people, I am trying to install the Microsoft Teams TA, but i have some problems with the Webhook url , where ca... by tinrush1991 Loves-to-Learn Lots in Getting Data In 07-06-2021 0 1	0	1
Combining different sourcetypes with no common field ( except _time) Hi, I have one sourcetypeA which has following fieldsCluster1UsageAA10B15and so onthen I have one sourcetypeB which h... by ISP8055 Path Finder in Getting Data In 07-06-2021 0 1	0	1
Substract two dates Hi all,I am really struggling with subtracting two dates from each other. It sounds that easy but drives me literall... by boo_com Explorer in Getting Data In 07-06-2021 0 5	0	5
Is it possible to create another sourcetype under the same index from another sourcetype Hello Guys, newbie here. I've got data that's being sent to a generic sourcetype and I want to carve out another sou... by oylkm Explorer in Getting Data In 07-06-2021 0 8	0	8
Powershell scripted input I have a Powershell script that runs continuously and prints some data to the console. I'd like to configure Splunk t... by Leo Splunk Employee in Getting Data In 07-05-2021 9 9	9	9
json SED problem Hi ,I am having json logs which I on-boarded to Splunk {"body":{"records": {"time": "2020-12-20T13:28:50.2164144Z","M... by General_Talos Path Finder in Getting Data In 07-05-2021 0 2	0	2
The curious case of missing events At the beginning of February this year we started ingesting events from Autosys prod and non-prd servers. All was go... by timrich66 Communicator in Getting Data In 07-05-2021 0 1	0	1
Getting Read Error. An existing connection was forcibly closed by the remote host Splunk Windows UF 8.2.0 Below is the error I am receiving on my splunkd.log on the Windows Splunk UF. The deployment server functionality is ... by dyizah Engager in Getting Data In 07-04-2021 0 0	0	0