Getting Data In

Community Activity

Monitor input error Hi guys, I´ve been trying to add data on my HF and when I get to submit my input I receive this error:franciscof_0-16... by franciscof Explorer in Getting Data In 10-16-2020 0 4	0	4
Time notions in event processing Hello everyone,I was reading through the docs and a question came to my mind.Does Splunk have different notions of ti... by oaken New Member in Getting Data In 10-16-2020 0 1	0	1
Monitoring browsing I want to create a setup where splunk monitors browsing from Firefox browser on ubuntu machine.If a user browses a bl... by gruffalo New Member in Getting Data In 10-15-2020 0 1	0	1
Working on Securing Data with SSL between Heavy Forwarder and Universal Forwarder using default certificates Hi, I am having trouble attempting to get a deployment server and a deployment client to communicate and then access ... by YusufK Loves-to-Learn Lots in Getting Data In 10-15-2020 0 2	0	2
What is average Internal Events count per day on average servers?? Hi Splunkers,I've been working over capacity planning where for estimating indexer requirement.I'm stuck while calcu... by hectorvp Communicator in Getting Data In 10-15-2020 0 3	0	3
I am new to Splunk and have a question Greetings! I am new to Splunk and I am trying to learn it so please take it easy on me I setup an environment with ... by knsaunders Loves-to-Learn in Getting Data In 10-15-2020 0 2	0	2
Splunk DB Connect - ERROR io.dropwizard.jersey.errors.LoggingExceptionMapper - Error handling a request: Im setting up a new DB connect to pull data from MS SQL server 2016 database to splunk :1. Downloaded the latest vers... by spl_unker Explorer in Getting Data In 10-15-2020 0 5	0	5
Limit output network bandwidth during peer decommissioning Hello,We are in a multi-site indexer cluster environment, and we are going to upgrade our infrastructure from 3 Index... by edoardo_vicendo Builder in Getting Data In 10-15-2020 0 2	0	2
Has anyone had props.conf and transforms.conf to work properly for Bluecoat 6.7.4.3 log formatting? We use Splunk Bluecoat-TA but many fields are missing. They have not changed log format. But it seems they change... by BenzSann Splunk Employee in Getting Data In 10-15-2020 0 1	0	1
Question on Regex for Windows Event Blacklist Hi All, In our environment we are wanting to cut down on some windows event logs. There are quite a few logs that hav... by dfurtaw Path Finder in Getting Data In 10-15-2020 0 1	0	1
log4j2 configuration for Splunk HEC on EC2 I have my log4j2.xml as below, <?xml version="1.0" encoding="UTF-8"?> <Configuration status="info" name="example" pac... by crippled-ankle Loves-to-Learn in Getting Data In 10-15-2020 0 1	0	1
Discard metrics Hello to everyone,i'm trying to figure out how to discard metrics before they are indexed. Unfortunately the source o... by giulioBalza Path Finder in Getting Data In 10-15-2020 0 0	0	0
Windows msiexec install is failing...why? This is the command run as a ps1 script pushed out by Airwatch: msiexec.exe /i C:\Windows\Temp\splunk\splunkforwarde... by phongshader1 New Member in Getting Data In 10-14-2020 0 0	0	0
Logs retention policy Hi SPlunkers,We have multiple sources reporting to same index, what we observe is for few sources we can see the sear... by SS1 Path Finder in Getting Data In 10-14-2020 0 4	0	4
how to filter by "does not equal" I know how to filter for a specific event so, for example, I always run this: source=wineventlog:* earliest_time=-24h... by Techfrogger Explorer in Getting Data In 10-14-2020 3 8	3	8
How to remove double quotes from a token using the replace method? Hello!I have the token() whose content is this: $support_group_token$=support_group="Service Desk" Is there any way t... by diogenesloazeve Engager in Getting Data In 10-14-2020 0 6	0	6
Bypassing normal system/local/props.conf processing for .tar.gz files Hello, I develop my own Splunk App for specific file. These files are archive files with the ".tar.gz" extension and ... by adrienG Engager in Getting Data In 10-14-2020 0 0	0	0
Windows File Server integration with Splunk Hello,What is the best third party app to monitor Windows File Server event logs such as (file read, file creation, p... by Kaand Explorer in Getting Data In 10-14-2020 0 2	0	2
Splunk indexing retention policy hello Splunkers,We have a index whose retention pol;icy is varying for the applications that are reporting to that in... by SS1 Path Finder in Getting Data In 10-13-2020 0 4	0	4
Azure Add-on user data truncation I'm using the Azure Add-on for splunk to pull in our azure AD signin, audit and user data; all is work well for the m... by drobMT Explorer in Getting Data In 10-13-2020 0 3	0	3
Forwarding to a third party syslog server based on both host, sourcetype and regex We have to forward some data from a Splunk Heavy Forwarder to a third party syslog server.This is possible as indicat... by edoardo_vicendo Builder in Getting Data In 10-13-2020 0 2	0	2
Field extraction during indexing does not work Hello,I have following entry in my transforms.conf:[dtimes] REGEX = ^.+s4hana\.ondemand\.com (?P<DBSID>.{3}).+t0\(tim... by damucka Builder in Getting Data In 10-13-2020 0 5	0	5
Override the Splunk unarchiver when uplaod tar.gz file Hello,I've got an application that generates an archive file with nested archive files in it.here is a sample of my f... by adrienG Engager in Getting Data In 10-13-2020 0 2	0	2
Changing Sourcetype at Index Time on Heavy Forwarder? Hi, I would like to change the sourcetype of data being received from a UDP Syslog stream via a heavy forwarder. On t... by marrette Path Finder in Getting Data In 10-13-2020 0 2	0	2
Configure an app to target a specific splunk server I have two servers (all-in-one), one's production the other development. Sometimes, I'd like to have a forwarder send... by tmontney Builder in Getting Data In 10-12-2020 0 1	0	1