Getting Data In

Community Activity

Parsing XML - ignore new line @somesoni2 I am trying to parse a complex xml and asking about the regex for SEDCMD-abremoveheader which refers to li... by sbaror11 Explorer in Getting Data In 11-11-2020 0 0	0	0
Forwarder restarting every 10 minutes Hi,I have a dozen of UFs that are restarting every ten minutes. They are on Windows. Running 7.2 (latest supported ve... by jihape Path Finder in Getting Data In 11-10-2020 0 2	0	2
Source Type, Web Application and BREAK_ONLY_BEFORE I discovered our logs were split between events. I notice that Splunk split the event ANY date and time it found in o... by jsgossett Engager in Getting Data In 11-10-2020 0 2	0	2
Splunk logs to Kafka I have a data which is already indexed in Splunk through Universal Forwarder. So i want to send this data from Splunk... by ismail4u88 New Member in Getting Data In 11-10-2020 0 0	0	0
interval in input.conf not followed, Windows add-on Windows add-on 8.0.0, Splunk 8.0.4.No matter the interval settings in inputs.conf, they seem to run at random times. ... by mykol_j Communicator in Getting Data In 11-10-2020 0 4	0	4
Creating Index time fields for your HF's I'm trying to follow guides on how to create a new indexed field. Basically creating a field that gives us the name o... by Jarohnimo Builder in Getting Data In 11-10-2020 0 1	0	1
Splunk Stream TA stops streamfwd Hi Splunkers,Is there any way to get rid of this knonw issue on Stream app ? Currently, I'm collecting DNS logs via S... by skywalker Observer in Getting Data In 11-10-2020 0 0	0	0
certificate hardware for public procurement I'm Borys from LLC "Trading systems". Our company participates in public procurement The client describes in the req... by UcloudLLC Engager in Getting Data In 11-10-2020 0 2	0	2
extract a specific IP with positive lookahead I'm trying to extract multiple fields out of my log. my problem is that I do have multiplie ip adresses - one for the... by avoelk Communicator in Getting Data In 11-10-2020 0 1	0	1
Anyone think they can lend help me figure this out? I understand the error has to do with disk space but I have no idea how to actually fix theissue. I know how to locat... by drobles96 Engager in Getting Data In 11-10-2020 0 3	0	3
Timestamp recognition I am trying to monitor the log file and index to Splunk with the following log format.02/11/2020,16:09:02,test-xxxxx,... by kcchu01 Explorer in Getting Data In 11-09-2020 1 7	1	7
host writting to 2 diff indexes Just came across a scenario where a window server was writing to 2 diff indexes reported. What parameters needs to lo... by pavanbmishra Path Finder in Getting Data In 11-09-2020 0 3	0	3
How do I configure props for America/New_York in the date field? We have data such as - EVENT_TIMESTAMP="2020-11-09 11:12:30.617896 America/New_York", How can I handle the America/... by danielbb Motivator in Getting Data In 11-09-2020 0 1	0	1
Change the datetime UTC offset for a particular monitor file source Hello, I've setup a source for Splunk Cloud using the monitor file source like this: [monitor://C:\Logs\*.log] disabl... by kamm_1 Loves-to-Learn in Getting Data In 11-09-2020 0 0	0	0
Resilient add-on configuration error - Error while posting to url=/servicesNS/nobody/SA-Resilient/admin/sa_resilientconf I am getting following error when i am trying to configure Resilient app on Splunk.Error while posting to url=/servic... by ayushchoudhary Path Finder in Getting Data In 11-09-2020 0 0	0	0
Question about max total and hot/warm/cold size hi,i configure my index like this :# volume definitions[volume:hotwarm_cold]path = /mnt/fast_diskmaxVolumeDataSizeMB ... by vitojij183 Explorer in Getting Data In 11-09-2020 0 1	0	1
Sending Data to Splunk Cloud from Heavy Forwarder Hi,I have an app which collects logs and I have configured it to send data to a local enterprise instance of splunk a... by ayuri Engager in Getting Data In 11-09-2020 0 1	0	1
How to extract a value in a log and use it as hostname I've tried using props.conf.spec and transforms.conf.spec and some regex to extract a value from a logfile in order t... by avoelk Communicator in Getting Data In 11-09-2020 0 1	0	1
How do i set up a dashboard to monitor my home network I cant use the home monitor app because I have a Zyxel modem from Centurylink. And I am very new to Splunk. any ide... by jcodjo3 Explorer in Getting Data In 11-08-2020 0 8	0	8
restarting splunk from script input trying to restart splunk via a script... everything in the script works fine but when the restart happens the script ... by Cstone1 Engager in Getting Data In 11-07-2020 0 4	0	4
Upgraded to 8.1 from 8.0.7 and now I get Unable to initialize modular input "" defined in the app I just upgraded from 8.0.7 Enterprise from my Mac to 8.1 and now my apps are not working mainly oneUnable to initiali... by dtran Explorer in Getting Data In 11-06-2020 0 0	0	0
Timestamp issue with firewall logs Hi all, still learning Splunk here and we just started ingesting Fortigate firewall logs. After a recent FortiGate up... by tkerr1357 Path Finder in Getting Data In 11-06-2020 0 1	0	1
Wrong timestamp Palo Alto Dear Splunkers,Sorry about this, but I never did such thing before...My Splunk is in EU and now I added PaloAlto fire... by norbertt911 Communicator in Getting Data In 11-06-2020 0 2	0	2
SID not resolve on client server Good afternoon! Installed the Splunk_TA_windows application on the server, edited the inputs1. On the SPLUNK server, ... by servcisco Loves-to-Learn Everything in Getting Data In 11-06-2020 0 3	0	3
srcip having numeric number Hi All,While analyzing the firewall logs, i could see src_ip (src) field taking some numeric number also alognwith ac... by pavanbmishra Path Finder in Getting Data In 11-06-2020 0 7	0	7