Getting Data In

Community Activity

Splunk_TA_aws duplicated events HiI have Splunk_TA_aws installed on the heave forwarder the input are [aws_s3://aws_dome9_logs_amdocsdome9logs]aws_a... by rayar Contributor in Getting Data In 08-10-2020 0 3	0	3
Unable to index Windows registry monitoring (Certain Registry values) HiI have a requirement where I need to monitor certain registry key values on Windows server 2016. I am using the bel... by santosh_scb Path Finder in Getting Data In 08-09-2020 0 0	0	0
WinRegMon - Inputs.conf works on localhost but not on universal forwarder. Hi Team,The following inputs.conf works on localhost to monitor a registry key, but not working on the universal forw... by VasukiPramod Explorer in Getting Data In 08-09-2020 0 0	0	0
How do you troubleshoot missing windows event logs? I have been noticing that some windows event logs are not appearing in the Splunk search. For example the event code ... by ABasit10 Observer in Getting Data In 08-09-2020 0 5	0	5
Onboard logs from McAfee EPO Cloud I want to onboard McAfee EPO Cloud data. While there is an add-on available for on-prem solution of McAfee EPO, it do... by priyanka_231019 Explorer in Getting Data In 08-09-2020 0 0	0	0
Module 4 data upload fail without errors I have followed module 4 instructions twice (once I manually found the data add section) to upload data.All data uplo... by alancproctor Engager in Getting Data In 08-08-2020 0 1	0	1
Same data input two apps? Is it possible to share a sourcetype'd data between two apps?I have pfsense sending both firewall logs and Suricata e... by token2 Path Finder in Getting Data In 08-08-2020 0 1	0	1
TA-pfsense + Suricata + Barnyard2 gone + eve json = oh fun TL:DR- How do I specify in the props.conf that for "pfsense:suricata" to then use Splunk's json extraction?Situation ... by token2 Path Finder in Getting Data In 08-08-2020 0 6	0	6
Why am I receiving "cannot concatenate 'str' and 'NoneType' objects" error when uploading a log file? Sorry for bringing this up again, but the other questions haven't been answered yet in a way that would help us. I'm... by dwoehr Explorer in Getting Data In 08-08-2020 1 15	1	15
Is it possible to pseudonymize incoming data in Splunk? Hi forum, I would like to know if and how it is possible to pseudonymise incoming data in Splunk. I know that I can ... by schose Builder in Getting Data In 08-07-2020 2 11	2	11
How to blacklist events for a specific event code and task category? Trying to blacklist specific windows event logs based on event code and task category, but doesn't work . [WinEventL... by nmohammed Builder in Getting Data In 08-07-2020 0 6	0	6
Module 4 lab fundamentals using Splunk Cloud Hello,Module 4 lab fundamentals using splunk cloud there is no icon for "add data."Yes, I'm logged in as the admin.Ag... by alancproctor Engager in Getting Data In 08-07-2020 0 1	0	1
By using command line how can inject zip file Axxxxxxxxx@gmail. by Lateef111 Observer in Getting Data In 08-07-2020 0 1	0	1
Splunk dbConnect inputs I am using Splunk dbConnect to collect data from database. While configuring the connection, set the timezone as Etc... by chaitali_1994 Engager in Getting Data In 08-07-2020 0 3	0	3
Splunk - CSV data indexing again and again + Splunk is indexing field names as new event Hi Everyone,Below is my CSV fields and some values and I am doing continuous monitoring CSV file:TIMESTAMP, NAME, AGE... by shahbhavin19 Loves-to-Learn Lots in Getting Data In 08-07-2020 0 5	0	5
How to write splunk output in csv file using python code? Hi, I have created an application using Django Binding, where I have a code in Python in which wrote a search query ... by harshal_chakran Builder in Getting Data In 08-06-2020 1 5	1	5
Change host props and transforms not working Guys,I need a help.I've configured the props and transforms to change the host field from a lambda function I'm colle... by wvalente Explorer in Getting Data In 08-06-2020 0 3	0	3
How to disable perfmon index in one of the cluster? In my enviroment there are 2 indexer cluster .i.e. cluster 1 and cluster 2. I need to disable perfmon index in cluste... by sag5757 Explorer in Getting Data In 08-06-2020 0 3	0	3
Is there a way to change the token prefix from splunk to bearer? Hi All,We are trying to push data from Grafana to Splunk using HEC based integration. When we did the testing we foun... by nareshkumarg Path Finder in Getting Data In 08-06-2020 0 2	0	2
How to use ip address instead fqdn in splunk mail server configuration? My host is not capable of resolving the ip address so can any one help to configure my ip address as mail relay. by btshivanand Path Finder in Getting Data In 08-06-2020 0 1	0	1
how to extract json fields in a mixed type log outside SPL (spath) in props.conf/transform.conf I have a logfile with "\|" (pipe) seperated field. So i use transform.conf to seperate those fields.two of the fields ... by RetailOperation Explorer in Getting Data In 08-06-2020 0 0	0	0
new index not accepting data Hello,I am not able to get my data into the newly created "varlog" index. The index is an event index and active in t... by damucka Builder in Getting Data In 08-06-2020 0 5	0	5
Restarting Splunk UF due to TcpOutputProc issues Hi - having issues with a Windows UF we are having to restart circa weekly to clear the issue below which happens at ... by nickhaj New Member in Getting Data In 08-06-2020 0 3	0	3
splunkd.log errors attempting to send PCF data via TCP Hello,We are trying to send log data from PCF applications over to our Splunk indexers via TCP. This was configured a... by SPlunkQR Explorer in Getting Data In 08-05-2020 0 1	0	1
What configuration changes can we make to limit the ability of a user search to consume all the available memory on an indexer? All of the indexers in our index cluster are becoming unstable due to a user search. Would like a resource to review ... by sat94541 Communicator in Getting Data In 08-05-2020 0 3	0	3