Getting Data In

Community Activity

Universal Forwarder Stops sending data Hi, We have a Universal Forwarder on our Linux rSyslog server. It was working fine until two weeks ago. The problem... by harrisoncs Explorer in Getting Data In 08-03-2020 1 7	1	7
Extracting Date and Time from Events How do I extract the date and time from my events?Event Data Sample-------------------------Jun 4 01:27:01 rofsso504a... by NealBr New Member in Getting Data In 08-03-2020 0 4	0	4
(Caused by ProxyError('Cannot connect to proxy.', NewConnectionError(' we have heavy forwarder with splunk_ta_o365 installed the integration is working for some time and after some time I ... by rayar Contributor in Getting Data In 08-03-2020 0 0	0	0
Splunk App Packaging: How to package app with multiple add-ons to a single .spl file? I am trying to package the app with splunk package app abc But since there is another add-on which I installed f... by m_zaman Engager in Getting Data In 08-02-2020 0 3	0	3
Getting metrics timestamp in future Hello, I am trying to get metrics from RouterOS using scripting (logs are forwarded using UDP)I end up with all times... by nazar554 Loves-to-Learn in Getting Data In 08-01-2020 0 0	0	0
Receiving error message while starting Splunk on AIX7.2 Dear Splunkers, I am trying to install Splunk 7.0.7 version universal forwarder on an AIX7.2 machine. While doing so... by vsidharda Engager in Getting Data In 07-31-2020 0 1	0	1
How to see a list of files that Splunk is currently monitoring? I want to list out the current data inputs, I ran the following command: C:\Program Files\SplunkUniversalForwarder\... by s1j1yem1x Path Finder in Getting Data In 07-31-2020 0 9	0	9
Fixup Tasks - Pending - Streaming Failure Have Indexer Cluster. Have settings set to Search Factor 2, Replication Factor 3. I have 5 Indexer Peers at the momen... by dtrust New Member in Getting Data In 07-31-2020 0 0	0	0
Can Palo Alto logs be sent directly to Splunk, or do they initially need to be sent first to a syslog server ? I'm wondering if it's possible to configure the Palo Alto log forwarding profile so that the PA logs are directly sen... by adnankhan5133 Communicator in Getting Data In 07-31-2020 0 1	0	1
How to add _meta to all entries from forwarder? We have couple development environments that have Windows servers with same names (i.e. HOSTNAME1) and would like to ... by mestuleslv Engager in Getting Data In 07-31-2020 1 10	1	10
DB Connect - Query timed out Issue Im setting up a new DB connect. While creating inputs i could execute the SQL query and get results in Batch Mode. Wh... by spl_unker Explorer in Getting Data In 07-30-2020 0 1	0	1
Install Universal forwarder from Splunk Deployment Server? Hi, Want to monitor many devices on my local site and on remote, can I deploy installation of universal forwarder age... by jblibam New Member in Getting Data In 07-30-2020 0 5	0	5
Certain Defender ATP alerts are being onboarded multiple times Hello,I am trying to onboard Defender ATP alerts using Microsoft Defender ATP Add-on for Splunk (https://splunkbase.s... by RevatiLawrence New Member in Getting Data In 07-30-2020 0 0	0	0
How to add timezone recognition on WinPrintMon logs? I've sat up monitoring of WinPrintMon on some Windows servers. The input using the WinPrintMon stanza, as described h... by hettervik SplunkTrust in Getting Data In 07-30-2020 0 0	0	0
Splunk DB connect Integration Splunk DB Connect 3.3.1 - New database connection to MS SQL Server failsJRE version - 8JDBC Driver - 7.2.2Task serve... by nbr Explorer in Getting Data In 07-29-2020 0 2	0	2
FluentD to Splunk Hi There,I'm trying to get the logs forwarded from containers in Kubernetes over to Splunk using HEC. Fluentd has bee... by venksel Explorer in Getting Data In 07-29-2020 1 0	1	0
rsyslog no send logs in specific ip range Hi,I have 2 indexerswith the command I confirm that port 9997 is open.In one of the two indexers all the incoming con... by splunkcol Builder in Getting Data In 07-28-2020 0 1	0	1
How to make a POST request to Splunk API in a SimpleXML javascript dashboard? How can I use the splunkjs "Service" class to make POST changes to .conf files via the REST API in a Splunk SimpleXML... by herbatology New Member in Getting Data In 07-28-2020 0 1	0	1
Can I use the Splunk Supporting Add-on for Active Directory (SA-ldapsearch) to enumerate group membership for a specified user? I have seen how the Splunk Supporting Add-on for Active Directory (SA-ldapsearch) can give me a list of all groups, a... by danielansell Path Finder in Getting Data In 07-28-2020 0 1	0	1
Heavy Forwarder can not preview SQL server data Hello Splunk community,We had the splunk heavy forwarder set up on one machine, and SQL server database on the other ... by xlin Engager in Getting Data In 07-28-2020 0 3	0	3
Why is my oneshot command not working I have a oneshot command thats returning strange error message. I have everything in [-paramteter value] format. Here... by tkw03 Communicator in Getting Data In 07-28-2020 0 2	0	2
Duplicated Events: Local Log4net_xml Monitor I've got an issue where a significant portion of my ingested Log4Net_xml sourcetype logs have duplicate events. I'm c... by JacobCarrell Explorer in Getting Data In 07-28-2020 0 0	0	0
IIS logs :Need to mask cs_cookie,cs_Referer and cs_uri_path but headers still showing values after using SEDCMD Need to mask cs_cookie,cs_Referer and cs_uri_path but headers still showing values after using SEDCMD.i need to mask ... by sag5757 Explorer in Getting Data In 07-28-2020 0 3	0	3
Universal Forwarder to Intermediate Forwarding to Splunk Enterprise Instance,Indexer Cluster & Heavy Forwarder I've a scenario where I've got around 250 servers where UF has to be installed. These data would be forwarded to Inde... by hectorvp Communicator in Getting Data In 07-28-2020 0 6	0	6
Extracting JSON object from JSON array, if value matches I've stuck in a scenario, where I want to extract complete JSON object from an JSON array collection on behalf of my ... by rishabh10jain Engager in Getting Data In 07-28-2020 0 5	0	5