Getting Data In

Community Activity

Sending Data to Splunk Cloud from Heavy Forwarder Hi,I have an app which collects logs and I have configured it to send data to a local enterprise instance of splunk a... by ayuri Engager in Getting Data In 11-09-2020 0 1	0	1
How to extract a value in a log and use it as hostname I've tried using props.conf.spec and transforms.conf.spec and some regex to extract a value from a logfile in order t... by avoelk Communicator in Getting Data In 11-09-2020 0 1	0	1
How do i set up a dashboard to monitor my home network I cant use the home monitor app because I have a Zyxel modem from Centurylink. And I am very new to Splunk. any ide... by jcodjo3 Explorer in Getting Data In 11-08-2020 0 8	0	8
restarting splunk from script input trying to restart splunk via a script... everything in the script works fine but when the restart happens the script ... by Cstone1 Engager in Getting Data In 11-07-2020 0 4	0	4
Upgraded to 8.1 from 8.0.7 and now I get Unable to initialize modular input "" defined in the app I just upgraded from 8.0.7 Enterprise from my Mac to 8.1 and now my apps are not working mainly oneUnable to initiali... by dtran Explorer in Getting Data In 11-06-2020 0 0	0	0
Timestamp issue with firewall logs Hi all, still learning Splunk here and we just started ingesting Fortigate firewall logs. After a recent FortiGate up... by tkerr1357 Path Finder in Getting Data In 11-06-2020 0 1	0	1
Wrong timestamp Palo Alto Dear Splunkers,Sorry about this, but I never did such thing before...My Splunk is in EU and now I added PaloAlto fire... by norbertt911 Communicator in Getting Data In 11-06-2020 0 2	0	2
SID not resolve on client server Good afternoon! Installed the Splunk_TA_windows application on the server, edited the inputs1. On the SPLUNK server, ... by servcisco Loves-to-Learn Everything in Getting Data In 11-06-2020 0 3	0	3
srcip having numeric number Hi All,While analyzing the firewall logs, i could see src_ip (src) field taking some numeric number also alognwith ac... by pavanbmishra Path Finder in Getting Data In 11-06-2020 0 7	0	7
Please help: I want to send data into Splunk Enterprise using API and I want to use Splunk HTTP Event collector Hello Folks,I have data in JSON format (data.json). I want to visualize the data by creating a dashboard in Splunk En... by jjoshi6 Explorer in Getting Data In 11-05-2020 1 7	1	7
Exclude words from subject I have to exclude all subject with some similar set of words in subject.Eg. Inc00452\| RE: Exchange 2K16: Alert: Proce... by priya0709 Path Finder in Getting Data In 11-05-2020 0 6	0	6
Bug: tried to check/configure STData processing but have no pending metadata. All, having issues getting some data into Splunk. I have a system that processes literally tens of thousands of CSV f... by mnamestnik Explorer in Getting Data In 11-05-2020 0 0	0	0
events print()-ed from Python input merged While using print() to emit events from Python input, sometimes the events from separate print statements get merged.... by gliptak Explorer in Getting Data In 11-05-2020 0 2	0	2
Key value pair... in a key value pair Assume I have this key value pair in splunk uri_query=“client=safari&source=hp&ei=5k-kX56GMdGpytMPu7asyA0&q=random+s... by adepasquale Path Finder in Getting Data In 11-05-2020 0 1	0	1
Time Stamps not seperating Hello Splunk Community,Just starting out configuring Splunk and having an issue with my Time Stamps and line Breaks. ... by lukeasplunk Observer in Getting Data In 11-05-2020 0 3	0	3
Data no longer coming due to SSL error I am new to Splunk but was task to leverage Splunk to build dashboards and monitor all of our data from SFMC.I was su... by dtran Explorer in Getting Data In 11-05-2020 0 0	0	0
IIS Parsing Issues Hi,I'm getting problems while getting data parsed from IIS TA.an example may be in the host field I'm getting: /servi... by emele1986 Loves-to-Learn in Getting Data In 11-05-2020 0 0	0	0
Sourcetype by Forwarder GUID Hi there,I have 2 forwarders on a single box - one HF one UF. I want to switch off the UF. Im looking for a list of s... by mwdbhyat Builder in Getting Data In 11-05-2020 0 3	0	3
field extraction Hi All,what should be the regex while doing event extraction for srcip eventtime=1604591829395228259 appid=41 srcip=1... by pavanbmishra Path Finder in Getting Data In 11-05-2020 0 3	0	3
Change a sourcetypes 'host' field to read from the 'shost' field instead. I have a feed that has the host field defaulting to what is essentially the sourcetype, but in the shost field I have... by robnewman666 Path Finder in Getting Data In 11-05-2020 0 2	0	2
Index has empty data when using HEC Hello I need an urgent help.I created HEC data inputs. I did follow these guidelines.https://docs.splunk.com/Document... by malikperang Loves-to-Learn Everything in Getting Data In 11-05-2020 0 4	0	4
Issue with Monitoring files in Splunk i m trying to monitor a json file with custom sourcetype for line breaking that i have build but not getting events ... by sdivya Observer in Getting Data In 11-05-2020 0 0	0	0
Transforms working intermittently on index cluster for AWS Kinesis to HEC Hello Splunkers,We are receiving config notifications, CloudTrail and others from AWS through Kinesis - the general p... by johnansett Communicator in Getting Data In 11-04-2020 1 1	1	1
Forwarding Cisco Finesse logs into Splunk Cloud Has anyone forwarded Cisco Finesse logs to Splunk Cloud? If yes, it would be great if they can share the steps to do ... by akriti Explorer in Getting Data In 11-04-2020 0 1	0	1
isReadOnly is Hi, In smart store splunk clusters with smart store enabled on all indexes with remotePath in [default} stanza, Is t... by bsrikanthreddy5 Path Finder in Getting Data In 11-04-2020 0 0	0	0