Getting Data In

Community Activity

Upgrade from 6.5 to last version Hello,We are using Splunk Enterprise 6.5 and we want to upgrade to the last version.What is the best way to do this ?... by supportsantnet Engager in Getting Data In 10-12-2020 0 4	0	4
job status polling via external API What are the best practices in collecting job statuses in Splunk via an external API?(I am not sure I am asking the r... by mitag Contributor in Getting Data In 10-12-2020 0 0	0	0
After Cloning a sourcetype using TRANSFORMS-CLONE i cant get timestamp to be read on the new sourctype Hi I am cloning a sourcetype twice. (Using TRANSFORMS-CLONE = CLONE_SOURCETYPE_JAVA,CLONE_SOURCETYPE_JAVA1) Then in ... by robertlynch2020 Influencer in Getting Data In 10-11-2020 0 3	0	3
Using Splunk HTTP Event Collector with log4j2 Hi,I'm trying to use SplunkHTTPAppender in production, the set up (log4j2.xml) works in development environment. But... by crippled-ankle Loves-to-Learn in Getting Data In 10-11-2020 0 2	0	2
splunk uf not reading logs hellowe’ve directory structure as follows/apps/ftp/user/logs/admin -- main directorysub-directories2018 2019 2020and ... by AzmathShaik Path Finder in Getting Data In 10-09-2020 0 1	0	1
Setting host value from DB Connect SQL statement results While creating a new DB Input in DB Connect 3.4.0, i need to set the host value per event as it is indexed. Its a SQL... by joesrepsolc Communicator in Getting Data In 10-09-2020 0 1	0	1
How do I stop getting duplicate entries of JSON data from an API feed? I installed the Duo Security App that uses the API to download events in the JSON format. The data is collected and ... by scottrunyon Contributor in Getting Data In 10-09-2020 1 11	1	11
Configure schedule job to export data from splunk to Hadoop I need some documentation in configuring schedule job for exporting data from splunk to Hadoop using Splunk Hadoop co... by msplunk33 Path Finder in Getting Data In 10-09-2020 0 8	0	8
Splunk rest api - get a list of UF agent status Hi,I would like to use the splunk rest api to get a list of UF agents installed and their status, host, ip etc.Is the... by xdblazes1 Loves-to-Learn in Getting Data In 10-09-2020 0 2	0	2
How to extract nested key value pairs from a specific JSON string field using spath and kvdelim? I have JSON that looks like this. With the "message" field, there can be one or more key value pairs. How can I extra... by jkastning Engager in Getting Data In 10-09-2020 0 6	0	6
missing data from script input. Good afternoonCurrently we have a UF that is configured with 50 inputs, of which 49 work well and only 1 does not ind... by efaundez Path Finder in Getting Data In 10-09-2020 0 2	0	2
Clearpass App for splunk via syslog but doasn't work Hi everybody I installed the Clearpass TA application on my SH instance. it collects logs via syslogs. So here is the... by sdurao Engager in Getting Data In 10-09-2020 0 2	0	2
Calcuate time differences Hi, Looking out to calculate and find out the time differences between two time stamps (milliseconds and seconds). P... by splunklakshman Explorer in Getting Data In 10-08-2020 0 6	0	6
masking password with rex command hi i have a data where there are two fields with password which i need to mask via props.conf and also in the search.... by moin140586 New Member in Getting Data In 10-08-2020 0 1	0	1
How do i display only specific field values in a table Hi All,I'm ingesting data about device health state and want to create a dashboard that only shows the device service... by ajacobi Path Finder in Getting Data In 10-08-2020 0 4	0	4
Not able to post data to Splunk via postman I am using this body:{"time": "", "event":{"hello": "world"}}postman Uri: "https://localhost:8088/services/collector"... by rgudimalla007 New Member in Getting Data In 10-08-2020 0 0	0	0
I added a third Index to my Cluster Master How do I tell my forwarders to send data to the new index I added a third Index to my Cluster Master How do I tell my forwarders to send data to the new index or how my forwar... by ajromero Path Finder in Getting Data In 10-08-2020 0 1	0	1
Field extraction from simple one-sentense log Can anybody help me to create props.conf and transforms.conf files to correctly parse such logs? "2020-10-08 09:35:5... by user2020dy Path Finder in Getting Data In 10-08-2020 0 3	0	3
Generating dashboard pdf report Hi I'm new to the splunk communityI was trying to generate PDF report from the dashboard: Export > Schedule PDF deliv... by ac89live Explorer in Getting Data In 10-08-2020 0 2	0	2
Kiwi syslog server and Palo Alto app for splunk issues We have 3 palo alto firewalls that I'm sending syslog data to a solarwinds kiwi syslog server. I am having kiwi writ... by Iwdavies Path Finder in Getting Data In 10-07-2020 0 3	0	3
How to use where clause with table containing fields within quotes I have a query which looks like:index=test "TestRequest" \| dedup _time \| rex field=_raw "Price\":(?<price>.*?)," \| re... by nits Explorer in Getting Data In 10-07-2020 0 2	0	2
what is the strptime format for 2020-09-09T13:04:15.7007091Z what is the strptime format for 2020-09-09T13:04:15.7007091Z by nnesje Loves-to-Learn Lots in Getting Data In 10-07-2020 0 1	0	1
Login Activity I need to check the logs against Workstation XYZ to ensure no one else besides JDOE has logged into it from 9/15/20 0... by itsmevic Communicator in Getting Data In 10-07-2020 0 3	0	3
JSON formatted Sysmon in Splunk I'm trying to get sysmon logs into my Splunk Enterprise formatted as json, but can't figure out how to get it setup. ... by sthode3 Engager in Getting Data In 10-07-2020 1 3	1	3
universal forwarder matrics.log eventtype=connect_fail message and log not ingesting I receive the below error intermixingly in the UF metrics log and indexer is not receiving any log from this host. Th... by msplunk33 Path Finder in Getting Data In 10-07-2020 0 1	0	1