Getting Data In

Community Activity

LINE_BREAKER regex for I have XML files I'm trying to break-up into individual events based on the following XML format. I need to break the... by astackpole Path Finder in Getting Data In 10-30-2020 0 3	0	3
What is the best way to integrate Mulesoft with Splunk cloud? Need help with this integration.@richgalloway @woodcock by Roy_9 Motivator in Getting Data In 10-30-2020 0 4	0	4
Any way to monitor excessive write activity to a server? Greetings, Is there any way to query Splunk to see if host disk drives have excessive write activity vs. read activit... by SplunkLunk Path Finder in Getting Data In 10-30-2020 0 2	0	2
Placing props.conf in monitoring app Hi,We always place props.conf in parsing app.Today I saw a config where - props.conf is placed inside monitoring app.... by VijaySrrie Builder in Getting Data In 10-30-2020 0 1	0	1
Is there a way to increase the maxQueueSize for Syslog output? Hello Splunkers, I would like to know if there is any way to increase the queue of my syslog group. I mean, currentl... by ludoz13 Path Finder in Getting Data In 10-30-2020 1 5	1	5
How to write regex to event break a multi line file into single event? I have multi line file (_json), which I am trying to create a individual events, the multi line file contains array o... by Hemnaath Motivator in Getting Data In 10-29-2020 1 3	1	3
Monitor csv files directory Tail Reader Problem I am monitoring a directory with 101 csv file with the same format but I am having only 49 of them indexed. When I s... by marcos_eng1 Explorer in Getting Data In 10-29-2020 0 5	0	5
How to migrate warm and thawed data from non-clustered indexers to a s2 index cluster? HI,I am cutting over non-clustered indexers (v7.3.3) to a new smart store (s2) index cluster (v8.0.6).Currently I hav... by Glasses Builder in Getting Data In 10-29-2020 0 2	0	2
ta_ms_aad_azure_event_hub events are not pulled from Azure Event Hub I have defined eventhub_splunk_dev01event hub on HF , no events are pulled please assist [azure_event_hub://eventhu... by rayar Contributor in Getting Data In 10-29-2020 0 0	0	0
Why my stats command return wrong values ? Hi, I have a search very simple but it returns wrong results :The problem is the result is incoherent because the num... by mah Builder in Getting Data In 10-29-2020 0 4	0	4
why my eval strptime(substr()) field is not created ? Hi,I have a search like this :index="test" sourcetype="B"\| dedup Id\| eval horodate=strptime(substr(Horodate,1,10),"%Y... by mah Builder in Getting Data In 10-29-2020 0 11	0	11
Load balanced URL/VIP for indexers I have seen some information about load balancing within the outputs.conf file. And some regarding LB-side configurat... by mart10 Path Finder in Getting Data In 10-29-2020 0 3	0	3
GoAnywhere App log suggestions, ideas Hi All, So, there are no apps on splunkbase for "Goanywhere App", which is a "File Transfer Mobile App"from their web... by inventsekar SplunkTrust in Getting Data In 10-28-2020 0 2	0	2
Can Kafka Connect consume data from a separate kerberized kafka and route to Splunk? My pipeline is: Kerberized Kafka --> Logstash (hosted on a different server) --> Splunk.Can I replace the Logstash co... by pavan_injarapu Explorer in Getting Data In 10-28-2020 0 0	0	0
Trade offs in using stdout vs. '/services/receivers/simple?' REST API input Hi,I'm looking for some insight into the trade offs (if any) in using stdout vs. the '/services/receivers/simple?' R... by ayuri Engager in Getting Data In 10-28-2020 0 0	0	0
Splunk errors generated alongside successful data import with input script Hi,I'm getting the following error message from the splunk python code in admin.py (the trace is below in bold) every... by ayuri Engager in Getting Data In 10-28-2020 0 8	0	8
My machine log does not showing in Splunk Enterprise Hi,For testing purpose. I am install Splunk Enterprise and also install Splunk Universal forwarder in same machine (w... by Ramax Explorer in Getting Data In 10-28-2020 1 5	1	5
Multiple delineation and writing a props I have a .log file that looks similar to the following below and I've tried doing multiple props.conf configurations ... by loganacarter New Member in Getting Data In 10-28-2020 0 0	0	0
Splunk Configuration for Search Head, Indexer and Fowarder I have 3 systems, I want one system to work as Forwarder, one as Indexer and one as Search Head. Setting up forwarder... by gaurav_maniar Builder in Getting Data In 10-28-2020 0 6	0	6
How do I get RobotFramework tags into Splunk via Jenkins plugin? I have the Splunk Jenkins plugin in use, but I cannot find the RobotFramework test tags from the raw data.Should I do... by JykkeDaMan Path Finder in Getting Data In 10-28-2020 0 4	0	4
Unable to remotely restart universal forwarder I am attempting to restart a universal forwarder which is running on a Windows server. I enter the following: hxxps... by adamblock1 Explorer in Getting Data In 10-28-2020 0 4	0	4
field extraction Hi,How to find whether a field is extracted at index time (or) search time? by VijaySrrie Builder in Getting Data In 10-28-2020 1 3	1	3
transforms.conf Hi,How to write transforms.conf for the fields that are not present in metadataFor example, I need to write transform... by VijaySrrie Builder in Getting Data In 10-28-2020 0 3	0	3
Distinguish which Heavy Forwarder an event passed through? Hello, I've been looking through documentation and other answers, and would like some ideas on our specific use case... by adamsmith47 Communicator in Getting Data In 10-27-2020 2 1	2	1
What capabilities do I need to upload files with add data from custom role? Hello, we have to create a role from the scratch. that role has to have the capabilities required to upload .csv file... by 3DGjos Communicator in Getting Data In 10-27-2020 1 3	1	3