Getting Data In

Community Activity

host writting to 2 diff indexes Just came across a scenario where a window server was writing to 2 diff indexes reported. What parameters needs to lo... by pavanbmishra Path Finder in Getting Data In 11-09-2020 0 3	0	3
How do I configure props for America/New_York in the date field? We have data such as - EVENT_TIMESTAMP="2020-11-09 11:12:30.617896 America/New_York", How can I handle the America/... by danielbb Motivator in Getting Data In 11-09-2020 0 1	0	1
Change the datetime UTC offset for a particular monitor file source Hello, I've setup a source for Splunk Cloud using the monitor file source like this: [monitor://C:\Logs\*.log] disabl... by kamm_1 Loves-to-Learn in Getting Data In 11-09-2020 0 0	0	0
Resilient add-on configuration error - Error while posting to url=/servicesNS/nobody/SA-Resilient/admin/sa_resilientconf I am getting following error when i am trying to configure Resilient app on Splunk.Error while posting to url=/servic... by ayushchoudhary Path Finder in Getting Data In 11-09-2020 0 0	0	0
Question about max total and hot/warm/cold size hi,i configure my index like this :# volume definitions[volume:hotwarm_cold]path = /mnt/fast_diskmaxVolumeDataSizeMB ... by vitojij183 Explorer in Getting Data In 11-09-2020 0 1	0	1
Sending Data to Splunk Cloud from Heavy Forwarder Hi,I have an app which collects logs and I have configured it to send data to a local enterprise instance of splunk a... by ayuri Engager in Getting Data In 11-09-2020 0 1	0	1
How to extract a value in a log and use it as hostname I've tried using props.conf.spec and transforms.conf.spec and some regex to extract a value from a logfile in order t... by avoelk Communicator in Getting Data In 11-09-2020 0 1	0	1
How do i set up a dashboard to monitor my home network I cant use the home monitor app because I have a Zyxel modem from Centurylink. And I am very new to Splunk. any ide... by jcodjo3 Explorer in Getting Data In 11-08-2020 0 8	0	8
restarting splunk from script input trying to restart splunk via a script... everything in the script works fine but when the restart happens the script ... by Cstone1 Engager in Getting Data In 11-07-2020 0 4	0	4
Upgraded to 8.1 from 8.0.7 and now I get Unable to initialize modular input "" defined in the app I just upgraded from 8.0.7 Enterprise from my Mac to 8.1 and now my apps are not working mainly oneUnable to initiali... by dtran Explorer in Getting Data In 11-06-2020 0 0	0	0
Timestamp issue with firewall logs Hi all, still learning Splunk here and we just started ingesting Fortigate firewall logs. After a recent FortiGate up... by tkerr1357 Path Finder in Getting Data In 11-06-2020 0 1	0	1
Wrong timestamp Palo Alto Dear Splunkers,Sorry about this, but I never did such thing before...My Splunk is in EU and now I added PaloAlto fire... by norbertt911 Communicator in Getting Data In 11-06-2020 0 2	0	2
SID not resolve on client server Good afternoon! Installed the Splunk_TA_windows application on the server, edited the inputs1. On the SPLUNK server, ... by servcisco Loves-to-Learn Everything in Getting Data In 11-06-2020 0 3	0	3
srcip having numeric number Hi All,While analyzing the firewall logs, i could see src_ip (src) field taking some numeric number also alognwith ac... by pavanbmishra Path Finder in Getting Data In 11-06-2020 0 7	0	7
Please help: I want to send data into Splunk Enterprise using API and I want to use Splunk HTTP Event collector Hello Folks,I have data in JSON format (data.json). I want to visualize the data by creating a dashboard in Splunk En... by jjoshi6 Explorer in Getting Data In 11-05-2020 1 7	1	7
Exclude words from subject I have to exclude all subject with some similar set of words in subject.Eg. Inc00452\| RE: Exchange 2K16: Alert: Proce... by priya0709 Path Finder in Getting Data In 11-05-2020 0 6	0	6
Bug: tried to check/configure STData processing but have no pending metadata. All, having issues getting some data into Splunk. I have a system that processes literally tens of thousands of CSV f... by mnamestnik Explorer in Getting Data In 11-05-2020 0 0	0	0
events print()-ed from Python input merged While using print() to emit events from Python input, sometimes the events from separate print statements get merged.... by gliptak Explorer in Getting Data In 11-05-2020 0 2	0	2
Key value pair... in a key value pair Assume I have this key value pair in splunk uri_query=“client=safari&source=hp&ei=5k-kX56GMdGpytMPu7asyA0&q=random+s... by adepasquale Path Finder in Getting Data In 11-05-2020 0 1	0	1
Time Stamps not seperating Hello Splunk Community,Just starting out configuring Splunk and having an issue with my Time Stamps and line Breaks. ... by lukeasplunk Observer in Getting Data In 11-05-2020 0 3	0	3
Data no longer coming due to SSL error I am new to Splunk but was task to leverage Splunk to build dashboards and monitor all of our data from SFMC.I was su... by dtran Explorer in Getting Data In 11-05-2020 0 0	0	0
IIS Parsing Issues Hi,I'm getting problems while getting data parsed from IIS TA.an example may be in the host field I'm getting: /servi... by emele1986 Loves-to-Learn in Getting Data In 11-05-2020 0 0	0	0
Sourcetype by Forwarder GUID Hi there,I have 2 forwarders on a single box - one HF one UF. I want to switch off the UF. Im looking for a list of s... by mwdbhyat Builder in Getting Data In 11-05-2020 0 3	0	3
field extraction Hi All,what should be the regex while doing event extraction for srcip eventtime=1604591829395228259 appid=41 srcip=1... by pavanbmishra Path Finder in Getting Data In 11-05-2020 0 3	0	3
Change a sourcetypes 'host' field to read from the 'shost' field instead. I have a feed that has the host field defaulting to what is essentially the sourcetype, but in the shost field I have... by robnewman666 Path Finder in Getting Data In 11-05-2020 0 2	0	2