Getting Data In

Community Activity

	How to monitor Windows Defender evtx file? Hello everyone,I try to "ADD DATA" and specifically add the file "Microsoft-Windows-Windows Defender% 4Operational.ev... by DD Loves-to-Learn Lots in Getting Data In 05-10-2021 0 0	0	0
	Extraction of time if there are multiple formats Hello,I have syslog events that come with the _time either in seconds(epoch 1620685037) OR time in microseconds from... by govardha Path Finder in Getting Data In 05-10-2021 0 0	0	0
	Has any Splunk guru ever written a Splunk Maintenance plan. What would you include in it? Would you share please? Has any Splunk guru ever written a Splunk Maintenance plan? What would you include in it? Would you share your insigh... by SamHTexas Builder in Getting Data In 05-10-2021 0 0	0	0
	Issues with wildcard input stanza I've been having issues with wildcarded input monitoring. In an attempt to adjust for an issue with file path naming... by wilcomply13 Explorer in Getting Data In 05-10-2021 0 2	0	2
	Can Any Red Hat Satellite Logs be Ingested? Hello!Has anyone ever successfully ingested Red Hat Satellite logs using Splunk? If not, are there any plans on makin... by astackpole Path Finder in Getting Data In 05-10-2021 0 0	0	0
	Best AWS ingestion approach Hello,I am trying to settle on a new AWS event collection strategy. We are currently collecting using the older pull... by oleg106 Explorer in Getting Data In 05-10-2021 0 0	0	0
	FortiAnalzer Field Extraction Hi,I'm receiving FortiGate event via FortiAnalyser and I need to set the Host to the name of the device that created ... by Rhidian Path Finder in Getting Data In 05-10-2021 0 4	0	4
	Write to Output lookup HI Team,Need one help, I want to run a schedule for the below search events every 1 hr and capture the inportant fie... by vijaysubramania Path Finder in Getting Data In 05-10-2021 0 6	0	6
	Configuring Splunk_TA_stream 7.1.3 to ingest netflow from pfSense 2.4.4 on SE 7.3.1 Hi all, It doesn't matter how much I read the documentation https://docs.splunk.com/Documentation/StreamApp/latest/D... by j_stock Explorer in Getting Data In 05-09-2021 0 5	0	5
	My Splunkcloud _time is 4 hours in the future Hey Splunkers,while I was able to be self sufficient in most cases I have one application log server which is driving... by marcluescher Explorer in Getting Data In 05-08-2021 0 4	0	4
	Need help with Events truncate issue Hello,I have events coming via HEC to Splunk cloud with event size 2641524, i see the sourcetype truncate limit was s... by Roy_9 Motivator in Getting Data In 05-07-2021 0 5	0	5
	Splunk line breaking issue Hi, I'm trying to line break events and extract time stamp, but it has no date any ideas how to get this?[04:05:16.25... by knalla Path Finder in Getting Data In 05-07-2021 0 1	0	1
	Read JSON Hi, I'm new to Splunk. How do I have to set the props.conf in the indexer so that my JSON reads correctly? I would li... by bardill Explorer in Getting Data In 05-07-2021 0 3	0	3
	Can we Input data from url in splunk? i have some data on a url. Is there a way to feed data directly into splunk from url rather than using excel and then... by nikita012 New Member in Getting Data In 05-07-2021 0 7	0	7
	How to add scripts as data input? This is my first time dealing with script input. I tried to place my python script in both of these directories (C:\P... by tamduong16 Contributor in Getting Data In 05-07-2021 0 10	0	10
	How To optimize eps aggregation and filtration in splunk Hello guys,i'm working with a costumer which wants to replace arcsight with splunk.we're moving some systems from the... by etaihellman Engager in Getting Data In 05-06-2021 0 0	0	0
	add blacklist to previous deploy-app I am using the standard 'Splunk_TA_nix' deploy-app on all of my Linux agents. Now, we are starting to deploy Cortex X... by ttovarzoll Path Finder in Getting Data In 05-06-2021 0 0	0	0
	Using UF to forward data to local Heavy Forwarder and then on to Cloud I may have missed a topic in my search but is there a way to do the following (im also fairly new to Splunk so be gen... by damo66a Explorer in Getting Data In 05-06-2021 0 2	0	2
	ProxySG UTC+2 issue, recommended config Hi all,I'm new to this forum. Would be really happy if you could help me with this.I am ingesting Bluecode ProxySG lo... by ojay Path Finder in Getting Data In 05-06-2021 0 0	0	0
	How to configure index settings to index data directly in S3 buckets/smartstore ? Is there a way to skip hot buckets (local storage) and ingest/index data directly into smartstore (s3 buckets) ? by damode Motivator in Getting Data In 05-06-2021 0 3	0	3
	Why am I getting Splunk installation failure in Windows 10 64 bit? Hi I have downloaded Splunk Enterprise 7.1.2 version and installed in my machine but I'm getting an error during in... by Selvam09 New Member in Getting Data In 05-05-2021 0 13	0	13
	Data ingestion from AIX 6 We have an IBM AIX 6 instance from where we want to fetch data in Splunk. It is not supported by IBM anymore. Has som... by priyanka_231019 Explorer in Getting Data In 05-05-2021 0 0	0	0
	read json file in the _raw field Hello,I need to read the json data into the Splunk. I use the Webtools \|curl for that. However at the moment I do not... by damucka Builder in Getting Data In 05-05-2021 0 0	0	0
	change admin password in centos 7 I am new to splunk Thank you all with your figured the monitoring issue that I originally asked, now I can not login ... by obadr56 Loves-to-Learn in Getting Data In 05-04-2021 0 1	0	1
	Ingesting Data from an Isolated Network I have a client that has Splunk deployed on their business network, and they would like to ingest data from an isolat... by Moose Loves-to-Learn in Getting Data In 05-04-2021 0 1	0	1