Getting Data In

Community Activity

Prevent events from ingesting Hello,after connecting AWS add-on and configuration, I have this query which is filling my index with much unwanted e... by ranmys Loves-to-Learn in Getting Data In 07-09-2020 0 2	0	2
Getting error when using 'DATETIME_CONFIG = CURRENT' for a batch input. Hi, I am using a batch input to ingest some huge files with a single line events that do not have a timestamp. I have... by nawazns5038 Builder in Getting Data In 07-08-2020 0 0	0	0
Universal forwarder upgrade hi all,I need to upgrade the universal forwarder on a windows server. 1. Can I just download the latest version of th... by verifi81 Path Finder in Getting Data In 07-08-2020 0 1	0	1
How to change props.conf based on input/sourcetype I have a couple .txt files that I want to parse differently than the rest of my data coming in from my forwarders.How... by tbrown Path Finder in Getting Data In 07-08-2020 0 3	0	3
Universal Forwarder doesn't forward specific log Hello!It's my first time writing here so forgive me if my question may lack information.What I want to do: I want to ... by misterduke Explorer in Getting Data In 07-08-2020 0 4	0	4
Sending MacOS logs to Splunk without involving another tool or agent Trying to figure out a successful method for sending MacOS logs to Splunk without involving another tool or agent. We... by brattyah Splunk Employee in Getting Data In 07-08-2020 0 2	0	2
Splunk query output formating to Jason format I have ingested some logs to Splunk which now looks like below when searching from search header. {\"EventID\":563662... by krisrmal Engager in Getting Data In 07-08-2020 0 0	0	0
Restart a UF via CLI / other remote means Hi Is there a way to remotely restart a UF forwarder in splunk directly from within splunk e.g. using splunk cli or... by flo_cognosec Communicator in Getting Data In 07-08-2020 0 9	0	9
Deployment of Universal Forwarder to Apple Mac fleet Our company operates a fleet of Apple Macs. We would like to automate the deployment and configuration of the Unive... by wdeguara Explorer in Getting Data In 07-08-2020 0 4	0	4
Indexer - Indexes not retaining logs for as long as they should Hello,I have an issue with the Indexer not retaining logs for the expected period, and I'm really scratching my head.... by dylanmnf Engager in Getting Data In 07-08-2020 0 1	0	1
Is there a way to migrate indexed data from a legacy standalone indexer to a new indexer cluster? I've read through quite a few pages and there are mixed partial solutions. Is there a way to migrate indexed data f... by rewritex Contributor in Getting Data In 07-08-2020 1 7	1	7
AWS Add on AWS-- Issue with SQS-Based S3 and cloudwatch -Errors HiCan anyone help me in understanding the errors im getting in the application aws addon, i have configured the input... by sarithapguptha Engager in Getting Data In 07-08-2020 0 1	0	1
Splunk DB Connect - data formating Hey everyone!Lately we had an unfortunate incident were most of our logs were deleted from splunk. Luckily we saved t... by Acxon1 Observer in Getting Data In 07-07-2020 0 0	0	0
How to resolve latency between event time and index time? My index time is 7/6/20 3:37:42.210 PM My event time is 07/06/20 10:37:42.210 CDT My TIME_FORMAT=%x %H:%M:%S.%3N%Z B... by LogUx Motivator in Getting Data In 07-07-2020 0 7	0	7
Error while setting up connection using MongoDB Driver Hi,I have installed MongoDB drive from unityjdbc http://unityjdbc.com/mongojdbc/setup/mongodb_jdbc_splunk_dbconnect_... by SowCent123 Observer in Getting Data In 07-07-2020 0 0	0	0
How to change saved search permissions via python SDK? Hey, I am looking for a way to change permissions to a saved search via splunk python SDK. I tried using the splun... by dorilevy Path Finder in Getting Data In 07-07-2020 0 4	0	4
Dashboard: Include $job.message$ information Hello,I have a dashboard which populates the results of a query in a table form.The results of this table is sometime... by jaimelopez Explorer in Getting Data In 07-07-2020 0 0	0	0
change index for some events Hello splunkers. I am new to splunk and have a question on how to change index for events that e.g. have status 404 o... by yudzhin Explorer in Getting Data In 07-07-2020 0 7	0	7
splunk-bunyan-logger logs in impractical format I'm using splunk-bunyan-logger to log to splunk. The example on https://github.com/splunk/splunk-bunyan-logger sugges... by mcv Engager in Getting Data In 07-07-2020 0 1	0	1
timestamp extraction issue Hi ,My timestamp in data looks like: 2020-07-02T18:00:18+02:00 with name log_modified_date which i want to be extract... by abhinav_bel Loves-to-Learn Lots in Getting Data In 07-07-2020 0 7	0	7
Security questions about how Splunk handles session Hi can you help with these security questions about how Splunk handles sessions? (Either On-Premise Enterprise Splunk... by MCG_RasmusToelh Engager in Getting Data In 07-07-2020 0 0	0	0
MonitorNoHandle and Indexed_Extractions Hi All,We been having issues with a CSV that is open for a long period of time while a script writes to it no my idea... by lukessi Path Finder in Getting Data In 07-07-2020 0 0	0	0
Sourcetype Override I have a deployed a scripted input with source=perfmon_script that gets server and workstation data. in props.conf I... by nabeel652 Builder in Getting Data In 07-06-2020 0 18	0	18
Can't access my learning profile/add new course to cart Good morning, I have been having trouble accessing my learning profile to complete the free fundamentals 1 training. ... by amyneville New Member in Getting Data In 07-06-2020 0 3	0	3
Can reports be scheduled on Indexers ? Hi, In general , I want to understand pros and cons of scheduling reports on Indexers ? If the reports are on Indexer... by rashi83 Path Finder in Getting Data In 07-06-2020 0 1	0	1