Getting Data In

Community Activity

How to ensure no data is lost (add back the databases) if a server is rebuilt using an Ansible script? We have an Ansible script that rebuilds/reindexes etc a Splunk indexer, if for some reason it implodes on itself. We ... by troyfred Explorer in Getting Data In 06-04-2020 0 3	0	3
How to index events (CSV file from universal forwarder) based on the time field? I am trying to index a CSV file from UF, which contains some historical data. Below is the sample of the events. Some... by pgadhari Builder in Getting Data In 06-04-2020 0 4	0	4
Splunk REST Storage Endpoints - Clarification Hey Answers, I have an endpoint question if anyone has the knowledge to enlighten me. I have a client that was design... by AustinAlbrecht Engager in Getting Data In 06-04-2020 1 0	1	0
How can one have visibility through searches of Data Integrity checks operations in Splunk? Hi, Me and my collegue are thinking of a report (then placed in a dashboard) about having visibility on data integrit... by skender27 Contributor in Getting Data In 06-04-2020 0 8	0	8
Can I monitor files on a schedule instead of a continuously monitoring a file? Due to the question I posted before :http://answers.splunk.com/answers/291010/how-to-merge-a-multiline-event-correctl... by leo_wang Path Finder in Getting Data In 06-04-2020 0 3	0	3
Line breaking on JSON logs Hi Guys, Can anyone please help me with line braking for the below json log, {<!-- -->"totalSize" : 473,"done" : true,"record... by Inayath_khan Path Finder in Getting Data In 06-04-2020 0 1	0	1
How to monitor log files from /tmp/folder_name with a Universal Forwarder? I want to monitor log files and some custom files from /tmp/log_folder on a linux server. On the Linux box, the desir... by Log_wrangler Builder in Getting Data In 06-04-2020 0 10	0	10
Can I upload raw SAR text files to Splunk? Hi, I'm trying to upload raw SAR text files to Splunk, is it possible? Is there an add-on or other method to do this ... by suzyd New Member in Getting Data In 06-04-2020 0 1	0	1
WinEventLog whitelisting by SourceName not working I'm trying to whitelist a few event logs by eventcode as well as whitelist all events with the SourceName "AD FS Audi... by jrlane Engager in Getting Data In 06-04-2020 0 6	0	6
Powershell Input: discrepancies in pipeline execution? I have a simple powershell input: [powershell://Windows:Applications] script = Get-WmiObject -Class Win32_Product \| ... by c_boggs Explorer in Getting Data In 06-03-2020 1 3	1	3
How to send log from Wordpress or PHP website to Splunk? We want to send custom logs from Wordpress Website to Splunk account. We already have a Splunk account. We tried with... by sumitmove New Member in Getting Data In 06-03-2020 0 2	0	2
Best practices for Splunking mobile endpoints I'd just like to hear from anyone who has implemented a successful strategy for Splunking mobile endpoints (Windows, ... by responsys_cm Builder in Getting Data In 06-03-2020 1 1	1	1
Can ingestion be restricted to only one server in a server class I have a common file that appears on multiple servers in a server class. This results in duplicated events. I need to... by timrich66 Communicator in Getting Data In 06-03-2020 0 1	0	1
What timezone does collect use? There is something wrong (or not obvious from the documentation) with how collect takes timezones. _time fields shoul... by khevans Path Finder in Getting Data In 06-03-2020 0 1	0	1
"too_small" sourcetype gets appended in some Splunk versions. I have added a monitor stanza for the log folder which contains log files that I want to ingest into Splunk. I have s... by siddharthfultar Engager in Getting Data In 06-03-2020 0 0	0	0
How to use .json file as input in a POST call to the REST API Im trying to update a role in our environment via the Splunk REST API and Im using POSTMAN like app with an input fil... by tomaskucerak Engager in Getting Data In 06-03-2020 0 0	0	0
Logs not received into splunk Hi Team, HF has been installed in a server, connectivity has been created to splunk, but we are not able to see any ... by VijaySrrie Builder in Getting Data In 06-03-2020 0 3	0	3
How to assign the _time to the value that comes from time_prefix and set it within each forced sourcetype? Hello, I am trying to set _time from a given stanza that occurs after the sourcetype stanza is forced. I am using a g... by davspl1 New Member in Getting Data In 06-02-2020 0 0	0	0
HF data forwarding to 3rd party design validation I have a requirement to push a subset of universal and heavy forwarders originating data to a third party, for which ... by splunk_zen Builder in Getting Data In 06-02-2020 0 0	0	0
DateParserVerbose - timestamp match is outside of the acceptable time window I'm getting a LOT of these warnings in my splunkd.log file but the timestamps all look correct. Can someone help me o... by marksnelling Communicator in Getting Data In 06-02-2020 1 23	1	23
Splunk DB Connect: Can the checkpoint value be used in query? I am adjusting the SQL statement for data input. There is a guideline to use rising input mode. SELECT * FROM your_ta... by cherryng New Member in Getting Data In 06-02-2020 0 1	0	1
Indextime extracted field requires wild card to search below is few sample of how my source filename look like- source="\\abc.com\storage\Queue\Name1\abcdLogs\sample0008095... by ips_mandar Builder in Getting Data In 06-02-2020 0 1	0	1
Splunk Connect with Power BI Need to know how to connect to Power BI? We can use Splunk ODBC but that is not working with latest version? Can anyb... by vishaltaneja070 Motivator in Getting Data In 06-02-2020 0 1	0	1
Route Data based on Heavy Forwarder Host? We're approaching this from an MSSP standpoint. We're looking at having an intermediate forwarder layer where we rout... by ajiwanand Path Finder in Getting Data In 06-02-2020 0 4	0	4
What script should I use to upgrade multiple universal forwarders on Linux? Hi, I am looking to upgrade multiple universal forwarders installed on Linux OS at one go. Could you please help me w... by rgadepal New Member in Getting Data In 06-02-2020 0 1	0	1