Getting Data In

Community Activity

Splunk doesn't format Sysmon JSON correctly That's the problem. I have a Sysmon JSON to examine but, although in the "Add Data" section everything looks OK, once... by Vyber90 Explorer in Getting Data In 06-26-2021 0 1	0	1
Filter AWS Cloudtrail readonly events Does anybody know a good way to filter out AWS Cloudtrail readonly events? This is what I have on my HF and jumping t... by ColinJacksonPS Path Finder in Getting Data In 06-26-2021 0 4	0	4
DB Connect MySQL Connection Hi,I am trying to create a new MySQL Connection in DB ConnectDriver installed : 5.1Application using JDK7 and java My... by madhav_dholakia Contributor in Getting Data In 06-25-2021 0 9	0	9
Problem Getting sentinelone as asset for phantom Enter the correct URL and api token but phantom will add-on the URL when testing. by Jozzytan New Member in Getting Data In 06-25-2021 0 0	0	0
Splunkism Regex? When using PCRE regex to split a field into components, I find it frustrating. I know my regex works as I've validat... by cdstealer Contributor in Getting Data In 06-25-2021 0 5	0	5
JDBC Connection With IBM i LPAR \| AS400 Hello Team, can you please suggest how could we make the JDBC connection to a test IBM i LPAR from SplunkIBM i LPAR R... by sachdeva_2007 Explorer in Getting Data In 06-25-2021 0 0	0	0
Why is my azure not sending all Windows Defender for Enpoint Alerts to Splunk? Hi,I try to figure this out for a week now and I am stucked. I installed the Microsoft 365 Defender Add-on for Splunk... by dkeck Influencer in Getting Data In 06-25-2021 0 0	0	0
HTTP Event collector won't work - only http 404 when trying to post Splunk Enterprise - Windows - 8.0.5I have tried to enable the HTTP Event Collector following this guideline https://d... by rune_hellem Contributor in Getting Data In 06-25-2021 0 10	0	10
I need help from you guru's! Split custom json array. { "miners":[ { "address":"7338594461977886954", "addressRS":"S-GJ9C-T2EF-C82A-8EZPD", ... by pir8radio Path Finder in Getting Data In 06-25-2021 0 10	0	10
Time_PREFIX for Props.conf with unstructured text file Hi There,Here is a segment of my sample data . Data is in text format. My Props.conf file has also been provided belo... by SplunkDash Motivator in Getting Data In 06-25-2021 0 7	0	7
How can I send the content of the file to HTTP Event Collector in Splunk? I am using a script that gives me some data in json format, I want to send this data to splunk.I can store the output... by Dolis Engager in Getting Data In 06-24-2021 0 1	0	1
use an event field as event time in Time column Hi, I have a CSV file containing events, like meta-data of user visiting a URL, that I import. The challenge I face i... by youSayGo Explorer in Getting Data In 06-24-2021 0 3	0	3
Multiple lines in CSV are in one event, how to separate it? Hello respective, i have a CSV type file which contains multiple lines of data. when i upload into the splunk few ... by Durga Engager in Getting Data In 06-23-2021 0 3	0	3
Trying to find average between two columns time index=phantom_container AND owner!=null AND close_time!=null\| eval st=strptime(create_time, "%Y-%m-%dT%H:%M:%S")\| eva... by teegarden7070 Explorer in Getting Data In 06-22-2021 0 2	0	2
Can Splunk Cloud filter out events without an on-prem Heavy Forwarder? Is it possible to implement event filtering (and/or routing) in a managed Splunk Cloud deployment without the usage o... by stefanovalentin New Member in Getting Data In 06-22-2021 0 4	0	4
Json array data to spilted in new events during indexing I am running python script and collecting array of Json data into single events. multiple events are clubbed into sin... by DataOrg Builder in Getting Data In 06-22-2021 0 3	0	3
Splunk Casb Oracle Cloud Good morning community, I find the following problem, a few days ago I stopped receiving json logs from the oracle cl... by Spike91 Loves-to-Learn in Getting Data In 06-22-2021 0 0	0	0
Confusion with sedcmd on an overided sourcetype Hello Team . I need an advice regarding an issue I experience.I have a Heavy Forwarder witch collects data from event... by Tasos Engager in Getting Data In 06-22-2021 0 0	0	0
How can I merge events from powershell input? I want to get events from below powershell input. inputs.conf [powershell://power_shell_sapmle] script = . "$Splu... by yutaka1005 Builder in Getting Data In 06-22-2021 0 15	0	15
Encrypt aws_key, aws_secret in DynamoDB modular input add-on. Hi Folks, Can anyone help me with encrypting/Masking the aws_key and aws_secret values for multiple inputs stored in ... by inayath_khanin1 Explorer in Getting Data In 06-22-2021 0 0	0	0
How to get the duration between different events of the same asset? Hi, I would like to find out how to calculate the time difference between different events of the same asset ID (grou... by Randall2020 Engager in Getting Data In 06-21-2021 0 2	0	2
Is there a way to get a list of Splunk Apps that are installed on a deployment client running a universal forwarder? Through Forwarder Management, you can see Clients and list how many apps are installed on that client. What I want t... by kennybirdwell Explorer in Getting Data In 06-21-2021 1 13	1	13
How to route errors of log monitoring to null queue Hi everybody!I currently monitor IIS web server logs from two different locations. the locations are D:\IISLOGS and E... by mzn1979 Explorer in Getting Data In 06-21-2021 0 1	0	1
DB Connect - Oracle DB - SQL Java Runtime Error when creating input Hi all, I have established a connection to a Oracle DB successfully using DBX.Now I want to create the input using a ... by ojay Path Finder in Getting Data In 06-21-2021 0 0	0	0
How tio construct a hec uri ? Hello I'm relatively new to splunk and I'm trying to stream data from Kafka to Splunk using kafka connect for splunk.... by ni4ni New Member in Getting Data In 06-21-2021 0 2	0	2