Getting Data In

Community Activity

Data PArsing json I am trying to parse json data in Splunk This is the example data. { "certificates": [ { "NotAfter": "2... by nawazns5038 Builder in Getting Data In 08-28-2020 0 8	0	8
Eventgen - Ensure current timestamp Hi All,I have a few existing inputs with EventGen (v6.5.2) and they work perfectly on Splunk 8.0.5.The use case I am ... by ehqtrainorm Explorer in Getting Data In 08-27-2020 0 0	0	0
Email Input Hello Splunkers,I'm wondering the best way to index an email. Not email server logs, the actual mail.There are a coup... by cjaramilloc Explorer in Getting Data In 08-27-2020 0 3	0	3
Best Practice for Adding a Transforms on Indexers Hey Splunk world, After learning that the nullQueue option for eliminating unneeded data is required to be installed ... by dfurtaw Path Finder in Getting Data In 08-27-2020 1 1	1	1
Extract "user" ID from monitor "fschange" event Hello.We are currently looking to utilize Splunk for monitoring a few configuration files on a server. To do that, w... by vpsmax Path Finder in Getting Data In 08-27-2020 0 3	0	3
A bit of ssl cert help needed I have an 8.0.5 Splunk environment. It is not a cluster, there is one indexer. I am quickly headed towards a distribu... by harrisoncs Explorer in Getting Data In 08-27-2020 0 0	0	0
is the index field in inputs.conf case sensitive? I have an example where logs are not shown in splunk search, and I can see the index name in the inputs file has mixe... by rjk123 Explorer in Getting Data In 08-27-2020 0 2	0	2
Adding data to the datamodel Hi,I'm looking to add CIM compliant database data to the databases datamodel.To give you some context what im trying ... by gwcon Path Finder in Getting Data In 08-27-2020 0 0	0	0
Unable to contact Splunk sales How do I get in touch with Splunk sales ? I filled out the online form twice. No response after a week.I phoned Splu... by tnawar New Member in Getting Data In 08-27-2020 0 2	0	2
Sourcetype Missing Hi @gcusello ,We are using the following query index=main sourcetype=wms_oracle_sessions \| bucket span=5m _time \| sta... by rahul2gupta Path Finder in Getting Data In 08-26-2020 0 15	0	15
Errors casuing unusable Indexer Linux VMs, slowdowns for entire vcenter cluster until powered off We are seeing two types of dmesg errors on the linux VMs which are acting as our indexers: 1) “task blocked for more... by mevangelisti New Member in Getting Data In 08-26-2020 0 1	0	1
Where to set HEC httpinputq value ? This is related to HEC queue size.When I execute "index=_internal host=abc group="queue" name="httpinputq" \| eval nam... by splunk_job Engager in Getting Data In 08-26-2020 0 6	0	6
Frozen Path using Fuse Filesystem from Alibaba Cloud Hello Everyone.Is there someone actually tried to using Fuse filesystem on their frozen path?Is there any issued that... by dadosyafikrie New Member in Getting Data In 08-26-2020 0 0	0	0
http event collector truncates event to 10,000 characters I am sending data to my splunk instance like https://docs.splunk.com/Documentation/Splunk/8.0.4/Data/HECExamples says... by sloh_splunk Splunk Employee in Getting Data In 08-26-2020 0 3	0	3
Can't get automatic extraction to work with json to kv So I'm referencing this solved answer: https://community.splunk.com/t5/Getting-Data-In/Extract-JSON-data-within-the-... by reswob10 Explorer in Getting Data In 08-26-2020 0 1	0	1
How to parse JSON mvfield into a proper table with a different line for each node named for a value in the node I have run into this barrier a lot while processing Azure logs: I want to do something intuitive like \|stats count b... by stroud_bc Path Finder in Getting Data In 08-26-2020 0 3	0	3
How can we assess the impact of reading the Oracle audit tables? We started recently to read the Oracle audit tables and since the DBAs say that their Oracle instances are maxed out,... by danielbb Motivator in Getting Data In 08-26-2020 0 1	0	1
How Splunk indexers operation works when it comes into manual detention state ? How Splunk indexers operations works when it comes into manual detention state ?We are migrating from RHEL 6 - RHEL 8... by ashikuma Explorer in Getting Data In 08-26-2020 0 2	0	2
index time extracted field in summary index Hi,I have created summary index using collect command and in summary index my actual host, source field gets converte... by ips_mandar Builder in Getting Data In 08-26-2020 0 2	0	2
Drop a percentage of incoming events before hitting licensing processor for LnP use cases Hi guys.We have a dev environment Splunk cluster with a dev license that LnP and dev teams send their data to.They ha... by jethrop Explorer in Getting Data In 08-26-2020 0 1	0	1
Splunk cloud - how to send data using http event collector Hi,I am new to using http event collector. I already received the hec token.I need to send data to splunk cloud , usi... by dkgs Communicator in Getting Data In 08-26-2020 0 5	0	5
Text logs not forwarded or indexed Hi,I have an issue in forwarding application logs (text files) to splunk.Windows Event Logs are forwarded and indexed... by MattMorish Explorer in Getting Data In 08-25-2020 0 6	0	6
Getting duplicate events in splunk-ITSI indexes. I have a clustered enviroment. But still getting duplicate events in splunk -ITSI indexes. Please give some recommend... by sag5757 Explorer in Getting Data In 08-25-2020 0 3	0	3
Certificate When i try to access server through 8089 where Forwarder is installed, i am seeing Invalid certificate."This CA Root ... by venkateshparank Path Finder in Getting Data In 08-25-2020 0 8	0	8
Can you define a line break when you find a certain character? Hi, I am trying to index data from a local directory, but the line break is not executing correctly. The expression I... by Claudia9308 New Member in Getting Data In 08-24-2020 0 2	0	2