Getting Data In

Community Activity

SplunkD Service randomly stopping on Windows Server 2012 My SplunkD Service randomly stops on my Windows Server 2012 making it so that I cannot reach the web interface. I hav... by mdplourde Explorer in Getting Data In 03-18-2021 0 4	0	4
Index all and selective forward Hi all. I need some help to index all data coming into one server and only forward 3 sourcetypes to a 2nd server. Rec... by Adevill Loves-to-Learn Lots in Getting Data In 03-18-2021 0 6	0	6
why am I seeing duplicate events in my metrics indexes? I am seeing duplicate events in a metrics index, help! deployment flow:hec client--->load balancer--->HFs (hec receiv... by rphillips_splk Splunk Employee in Getting Data In 03-17-2021 1 3	1	3
JMS Messaging Modular Input Hi All,I have installed and setup JMS Modular input add-on on Splunk HF and given below inputs-Activation keyJNDI cla... by kalyaniadm_wipr Loves-to-Learn in Getting Data In 03-17-2021 0 0	0	0
How do i index only specific lines from my log file? Hi,I have the log file,i need to search the part of line in bold(which as only EmployeeServices/com) and index only ... by Ashwini008 Builder in Getting Data In 03-17-2021 0 1	0	1
Index Performance Hi,We have an index that is feeding in data from an EKS/K8s infrastructure and getting roughly 4million events / 15 m... by jmc94 Loves-to-Learn in Getting Data In 03-16-2021 0 4	0	4
Is it possible to index a different timestamp based on a field value in the same log? I'm a new Splunk user that needs to perform some analysis on a set of logs with the following format:Status, Starttim... by matthewe25 Engager in Getting Data In 03-16-2021 0 1	0	1
Issue Executing Python Script on Windows UF I'm having an issue running a python script to generate the contents of an email body to splunk.I've had to install a... by dianasmith Loves-to-Learn in Getting Data In 03-16-2021 0 1	0	1
index time extraction for json logs Hi Splunkers ,I'm collecting logs from S3 through heavy forwarder which are in json format . After indexing i see the... by spl_unker Explorer in Getting Data In 03-16-2021 0 14	0	14
SmartStore on Azure? Has anyone managed to get SmartStore working with an Azure Storage Account? I know the requirement is S3 compatibili... by port7 Explorer in Getting Data In 03-16-2021 6 5	6	5
OKTA TLS requires TLS/cipher “BLUF: Looks like a TLS/cipher problem in addition to ca_bundel. I was able to connect without errors after specifyin... by youngso SplunkTrust in Getting Data In 03-16-2021 0 4	0	4
Do not index file based on content Greetings All,I'm indexing a bunch of metrics files written every 10 minutes. Just after midnight I get a file contai... by Random_Walk Path Finder in Getting Data In 03-16-2021 0 3	0	3
AWS Splunk server migration to another server in Azure Hi Splunk,I am using Splunk with the enterprise version, we have a plan to migrate the current Splunk server in AWS t... by itsaigon05 New Member in Getting Data In 03-16-2021 0 0	0	0
Issue: 1 XML file is splitting into 2 event First Issue: I've been trying to ingest 1 XML file into 1 event only in Splunk. But Splunk always splitting it into 2... by mariannedave Explorer in Getting Data In 03-16-2021 0 11	0	11
How to split a json message into multiple events? Hi Guys,could anyone help me to split the following json file in multiple events?I tried in different ways, adding KV... by mariobisio Explorer in Getting Data In 03-16-2021 0 6	0	6
SPLUNK Infosec (or SecEssentials) + Monitoring AD : Is CIM compliant by default? Hi community.We are trying to integrate the new InfoSec app with the AD monitoring. For this, we have deployed a wind... by MLGSPLUNK Path Finder in Getting Data In 03-15-2021 0 0	0	0
Connect to your Azure Storage account with the Splunk Add-on for Microsoft Cloud Services Hi ,I am trying to connect Azure Storage account with the Splunk Add-on for Microsoft Cloud Services following the be... by rahul2gupta Path Finder in Getting Data In 03-15-2021 0 2	0	2
Transforms within cluster not working Hi,Within our splunk environment we have 1 search head, 3 search peers, 1 deployer/master/license and 500+ UF. The uf... by jorambokma Explorer in Getting Data In 03-15-2021 0 2	0	2
create notable event for missing forwarders Hi, is there any solution to create a notable event for missing forwarders? Now missing forwarders generate an alert ... by jg91 Path Finder in Getting Data In 03-13-2021 0 2	0	2
Need Help Routing Subset of Docker Container Logs to Different Index Hello Splunk Community, I could certainly use you help getting myself out of a rather large jam I'm in. I need guidan... by TheColorBlack Path Finder in Getting Data In 03-13-2021 0 1	0	1
Wildcard to monitor in inputs.conf Hi,I have below log files under path /path/to/app/usera-x.loguserb-x.loguserc-x.loguserd-y.logusere-y.loguserf-z.logu... by SS1 Path Finder in Getting Data In 03-13-2021 0 5	0	5
Splunk App for Windows Infrastructure default index issue I have the latest SA-LDAP, Splunk_TA_Windows and Windows Infra apps installed. I have sourcetype WinHostMon data com... by token2 Path Finder in Getting Data In 03-12-2021 0 3	0	3
[WinError 10061] No connection could be made because the target machine actively refused it Hello! I am having trouble uploading any files to Splunk using Add Data. This is the whole error message I am getting... by althoffarick Engager in Getting Data In 03-12-2021 1 0	1	0
Props.conf, transforms.conf and Index Time field extractions not working in production environment We are logging one application deployed in Kubernetes and ingesting its tomcat localhost access logs in Splunk via HE... by barora21 Engager in Getting Data In 03-12-2021 0 1	0	1
Splunk Monitoring Hi Splunkers,I'm working on Splunk and ServiceNow integration. Where ServiceNow team wants pull a report from Splunk ... by revanthammineni Path Finder in Getting Data In 03-12-2021 0 1	0	1