Getting Data In

Community Activity

Custom Search Command pass arguments as subsearch I need to pass two values to my Custom Search Command.These are my Options: x = Option(require=True) y = Option(req... by Unige2021 Loves-to-Learn in Getting Data In 06-03-2021 0 0	0	0
Custom search command Values for these required options are missing: ... I need to pass to my python custom search command two values: x and y.I found some examples where it's shown this: x... by Unige2021 Loves-to-Learn in Getting Data In 06-03-2021 0 1	0	1
Why does the _json default sourcetype work, but a clone of it doesn't? Hello!Running Splunk Enterprise 8.0.5.I have a scripted input that calls an Azure Event Hub and parses the json respo... by andrewtrobec Motivator in Getting Data In 06-03-2021 0 3	0	3
Json parsing - Failed to parse timestamp Hi all,I'm quite new to splunk. I've been testing the manual upload of the following json file to splunk enterprise. ... by shakSplunk Path Finder in Getting Data In 06-03-2021 0 3	0	3
Replications not happening for certain buckets (version 6.3.1). We have a single-site indexer cluster with 2 indexers and one cluster master. We are seeing some issues related to on... by satyamm Explorer in Getting Data In 06-02-2021 0 2	0	2
Monitoring a config file, index only the changes Hello there,First off, im new to Splunk and im evaluating if all our auditing / monitoring / reporting needs can be ... by Azunai Loves-to-Learn Lots in Getting Data In 06-02-2021 0 1	0	1
Windows - Filtering Forwarded Events based on LogName I have a use-case:There is a WEC server receving logs from a server farm. I need to forward only security events from... by PickleRick SplunkTrust in Getting Data In 06-02-2021 0 4	0	4
Need help with REST API on Splunk Cloud Hello,I have a request to receive the data from an application into splunk cloud using REST API.Opt 1: Requested splu... by Roy_9 Motivator in Getting Data In 06-02-2021 0 2	0	2
Integrate Crowdstrike with Splunk Looking for a documentation where the steps are mentioned to get the crwodstrike logs on Splunk. What is the procedur... by akashbhardwaj10 New Member in Getting Data In 06-01-2021 0 1	0	1
Splunk DB Connect: Install on SQL Server itself? I've been surfing the documentation for Splunk DB Connect, and can't find any indication that I need to install anyth... by jasongb Path Finder in Getting Data In 06-01-2021 0 4	0	4
Indexing and parsing Azure AD logs I am new to splunk, we are currently trying to configure Splunk to parse AzureAD logs being received from a Syslog se... by vrajshekar Path Finder in Getting Data In 06-01-2021 0 3	0	3
HEC replacing underscore (_) with space ( ) I'm working with Proofpoint Threat Response events that are being sent to our instance of Splunk using an HEC connect... by jwhughes58 Contributor in Getting Data In 06-01-2021 0 0	0	0
Windows Forwarder to read eventlog from another windows server Hi Friends,We have old 2003 Windows server where we can not install UF anymore. So we want to read EventLogs from Win... by anantdeshpande Path Finder in Getting Data In 06-01-2021 0 5	0	5
Unpacking and Uploading certain files from an archive automatically/scripted What is the best way to get data into Splunk from a zip file (files in different subfolders of the zip) in an automat... by ValentinM Engager in Getting Data In 06-01-2021 0 2	0	2
AGREETOLICENSE not agreeing? Windows10 I'm trying to install Splunk UF through an MDM onto windows 10 but i'm running into an issue with the AGREETOLICENSE ... by phongshader New Member in Getting Data In 05-31-2021 0 4	0	4
Same sourcetype different data sets I have a source type for multiple CSV files where it is configured as with a no_timestamp. For now I have used this ... by willadams Contributor in Getting Data In 05-31-2021 0 2	0	2
How to pull logs into Splunk from Proofpoint via APIs or any other methods from a Proofpoint Cloud instance? Has anyone done Splunk and Proofpoint Cloud instance integration? I am looking for help to pull the logs from Proofpo... by daniel_augustyn Contributor in Getting Data In 05-31-2021 1 19	1	19
Route and filter data that is received only from certain index from tcp 9997 port Based on thishttps://docs.splunk.com/Documentation/Splunk/8.2.0/Forwarding/Routeandfilterdatad#Filter_data_by_target_... by z080236 Explorer in Getting Data In 05-31-2021 0 1	0	1
Using ASCII FS/GS Control Characters as Delimiters Hello! I'm having such a hard time with this but I know it is super-simple to do. Our log files are structured to u... by nboscia Engager in Getting Data In 05-29-2021 0 2	0	2
Eval c= USLanguage = abcdENGLISH123qw..... \| rex fields=Language "\w{4}(?<myval>)\d{4}"\| eval ans=case(c="US",myval, true(... by Khuzair81 Path Finder in Getting Data In 05-29-2021 0 1	0	1
Condition c1 = US, c2 = UAEL1 = English, L2 = ArabicI want to get the answer in "ans" like, If c1= US, then ans= L1elseif c... by Khuzair81 Path Finder in Getting Data In 05-29-2021 0 5	0	5
syslog data on udp port is showing as zero bytes in Splunk Hi Splunk experts, I ran into a strange situation in Splunk wherein udp connections but data size is zero. Just to... by vikasverma1985 New Member in Getting Data In 05-28-2021 0 1	0	1
AWS Grand Central Add-on with nested AWS OUs We installed the Grand Central 3.0.7 add-on installed in our Splunk Cloud environment and were working on configuring... by rbolande Explorer in Getting Data In 05-28-2021 0 0	0	0
How to SEDCMD nested json calculated as string? Hey Splunkers! We have a large json event that has a Body Message, and BodyJson Message, a little redundant but this ... by Aatom Explorer in Getting Data In 05-28-2021 0 4	0	4
How do I create extractions where it can pick field names from the events See events below I have 2 types of logs from one source where I need to map fields vs values ...I dont want to create complex regex as... by puneetkharband1 Path Finder in Getting Data In 05-28-2021 0 4	0	4