Getting Data In

Community Activity

iostat.sh is not returning any result to Splunk. Hi,I am using Splunk add on for Unix and Linux to get my CPU and iostat data of my hosts. Everything is working fine ... by admin12345678 Path Finder in Getting Data In 06-10-2020 0 0	0	0
Checksum too small and checksum does not match - how do I fix it? I keep getting these two errors when restarting the forwarder:ERROR TailReader - File will not be read, seekptr check... by esalmon Explorer in Getting Data In 06-10-2020 0 0	0	0
Splunk Use multiple index in a same search Hello Slunk Team,I have a question about appendcols.When I try to use two index to compare some information I got the... by jaciro11 Path Finder in Getting Data In 06-10-2020 0 5	0	5
WinRegMon proc regex not working Hi all,Have a distributed Splunk Enterprise deployment. I am trying to filter incoming registry events to remove wast... by bdaniel Engager in Getting Data In 06-10-2020 0 0	0	0
Extracting fields and values using csv in splunk Hi....I am relatively new to Splunk... So i am uploading a csv file as a input to splunk and trying to plot charts...... by priyaramki16 Path Finder in Getting Data In 06-10-2020 0 8	0	8
Is there any way we can ingest data from Spark? Some PPT are there for Spark connectivity with Splunk but all talks about the data exporting from Splunk. Need to ing... by aposharma Observer in Getting Data In 06-09-2020 0 0	0	0
How to resolve TailReader errors and data loss using universal forwarder (bug during applyPendingMetadata, header processor does not own the indexed extractions confs)? I've been dealing with this TailReader error for a while and was not able to fix it despite reading all answers and s... by Behnam67 New Member in Getting Data In 06-04-2020 0 0	0	0
LINE_BREAKER with INDEXED_EXTRACTIONS does not work Hello Splunk TEAM, I have a question. I have this data: {<!-- --> "@odata.context":"https://app.inlooxnow.de/odata/$meta... by jaciro11 Path Finder in Getting Data In 06-04-2020 0 10	0	10
How to ensure no data is lost (add back the databases) if a server is rebuilt using an Ansible script? We have an Ansible script that rebuilds/reindexes etc a Splunk indexer, if for some reason it implodes on itself. We ... by troyfred Explorer in Getting Data In 06-04-2020 0 3	0	3
How to index events (CSV file from universal forwarder) based on the time field? I am trying to index a CSV file from UF, which contains some historical data. Below is the sample of the events. Some... by pgadhari Builder in Getting Data In 06-04-2020 0 4	0	4
Splunk REST Storage Endpoints - Clarification Hey Answers, I have an endpoint question if anyone has the knowledge to enlighten me. I have a client that was design... by AustinAlbrecht Engager in Getting Data In 06-04-2020 1 0	1	0
How can one have visibility through searches of Data Integrity checks operations in Splunk? Hi, Me and my collegue are thinking of a report (then placed in a dashboard) about having visibility on data integrit... by skender27 Contributor in Getting Data In 06-04-2020 0 8	0	8
Can I monitor files on a schedule instead of a continuously monitoring a file? Due to the question I posted before :http://answers.splunk.com/answers/291010/how-to-merge-a-multiline-event-correctl... by leo_wang Path Finder in Getting Data In 06-04-2020 0 3	0	3
Line breaking on JSON logs Hi Guys, Can anyone please help me with line braking for the below json log, {<!-- -->"totalSize" : 473,"done" : true,"record... by Inayath_khan Path Finder in Getting Data In 06-04-2020 0 1	0	1
How to monitor log files from /tmp/folder_name with a Universal Forwarder? I want to monitor log files and some custom files from /tmp/log_folder on a linux server. On the Linux box, the desir... by Log_wrangler Builder in Getting Data In 06-04-2020 0 10	0	10
Can I upload raw SAR text files to Splunk? Hi, I'm trying to upload raw SAR text files to Splunk, is it possible? Is there an add-on or other method to do this ... by suzyd New Member in Getting Data In 06-04-2020 0 1	0	1
WinEventLog whitelisting by SourceName not working I'm trying to whitelist a few event logs by eventcode as well as whitelist all events with the SourceName "AD FS Audi... by jrlane Engager in Getting Data In 06-04-2020 0 6	0	6
Powershell Input: discrepancies in pipeline execution? I have a simple powershell input: [powershell://Windows:Applications] script = Get-WmiObject -Class Win32_Product \| ... by c_boggs Explorer in Getting Data In 06-03-2020 1 3	1	3
How to send log from Wordpress or PHP website to Splunk? We want to send custom logs from Wordpress Website to Splunk account. We already have a Splunk account. We tried with... by sumitmove New Member in Getting Data In 06-03-2020 0 2	0	2
Best practices for Splunking mobile endpoints I'd just like to hear from anyone who has implemented a successful strategy for Splunking mobile endpoints (Windows, ... by responsys_cm Builder in Getting Data In 06-03-2020 1 1	1	1
Can ingestion be restricted to only one server in a server class I have a common file that appears on multiple servers in a server class. This results in duplicated events. I need to... by timrich66 Communicator in Getting Data In 06-03-2020 0 1	0	1
What timezone does collect use? There is something wrong (or not obvious from the documentation) with how collect takes timezones. _time fields shoul... by khevans Path Finder in Getting Data In 06-03-2020 0 1	0	1
"too_small" sourcetype gets appended in some Splunk versions. I have added a monitor stanza for the log folder which contains log files that I want to ingest into Splunk. I have s... by siddharthfultar Engager in Getting Data In 06-03-2020 0 0	0	0
How to use .json file as input in a POST call to the REST API Im trying to update a role in our environment via the Splunk REST API and Im using POSTMAN like app with an input fil... by tomaskucerak Engager in Getting Data In 06-03-2020 0 0	0	0
Logs not received into splunk Hi Team, HF has been installed in a server, connectivity has been created to splunk, but we are not able to see any ... by VijaySrrie Builder in Getting Data In 06-03-2020 0 3	0	3