Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
We have installed Splunk in windows and we want to send windows logs from Search Head, LM and CM to 3rd party using a...
by
malisushil119
Loves-to-Learn Everything
in
Getting Data In
05-12-2025
|
0
|
15
| ||
|
|
What are the reasons for the slowness observed in the Splunk Mission Control incident review dashboard?
by
msatish
Path Finder
in
Getting Data In
a month ago
|
0
|
2
| ||
|
|
Hello,
Is it possible to have only 1 Universal Forwarder installed on a Windows server and this UF sends data to 2 ...
by
Flobzh
Explorer
in
Getting Data In
a month ago
|
0
|
4
| ||
|
|
Hi All.
Using Splunk for collecting logs from different devices. But logs from on devices on the network , is not...
by
dendel
Observer
in
Getting Data In
05-08-2025
|
0
|
8
| ||
|
Self-answered question follows. Perhaps it will help someone else in the same boat.
I have a file called portal-se...
by
twinspop
Influencer
in
Getting Data In
09-30-2016
|
0
|
2
| ||
|
|
[cmd_data=list cm device recusive]
splunk auto extracts just [cmd_data=list]
End result - be able to filter on cm...
by
splunkville
New Member
in
Getting Data In
05-16-2025
|
0
|
1
| ||
|
Hello all,
I am reviewing the Splunk add-on for vCenter Log and the Splunk add-on for VMware ESXi logs guides and h...
by
token2
Path Finder
in
Getting Data In
05-16-2025
|
0
|
2
| ||
|
|
Newly installed Universal forwarders on windows servers are forwarding logs to Splunk Cloud but newly installed forwa...
by
msatish
Path Finder
in
Getting Data In
05-07-2025
|
0
|
4
| ||
|
Hi Splunkers!!,
We have recently configured SSO in Splunk using Keycloak, and it's working fine — users are able to...
by
uagraw01
Motivator
in
Getting Data In
05-06-2025
|
0
|
2
| ||
|
|
Hi,
we are currently experiencing reliability issues when using the Microsoft Teams Add-on for Splunk (https://sp...
by
ahennewig_sva
Observer
in
Getting Data In
07-05-2024
|
0
|
2
| ||
|
|
Hi All,
Help please.
Can I get people to agree with me that the following is a bug/design flaw - as my splunk cas...
by
KeithH
Path Finder
in
Getting Data In
05-06-2025
|
0
|
6
| ||
|
|
Hello, has anyone worked with ingest-time lookup and familiar with it?
https://docs.splunk.com/Documentation/Splunk...
by
tah7004
Path Finder
in
Getting Data In
01-29-2021
|
0
|
8
| ||
|
|
All,
I found myself writing this props.conf today.
Say I have this:
[tomcat:src:server]
EXTRACT-springapp_...
by
daniel333
Builder
in
Getting Data In
07-13-2016
|
0
|
5
| ||
|
|
Hello Experts ,
I am trying to send windows security logs to logstash(http) receiver . Below is what I have based ...
by
vikas_gopal
Builder
in
Getting Data In
05-13-2025
|
0
|
14
| ||
|
|
Hi Team,Greetings !!
This is Srinivasa, Could you please provide Splunk with Unified Applications (CUCM) On-prem , ...
by
sreddem
Observer
in
Getting Data In
05-15-2025
|
0
|
1
| ||
|
Hello, have a question regarding log ingestion from Azure. At the moment, im using REST API to onboard logs to the on...
by
antnovo
New Member
in
Getting Data In
02-26-2019
|
0
|
6
| ||
|
Hi All,
Anyone who has worked with OpenText NetIQ Logs before?
We are receiving the NetIQ logs via syslog, but th...
by
tech_g706
Path Finder
in
Getting Data In
05-14-2025
|
0
|
4
| ||
|
|
Hi,
I am trying to gather data from a specific organisation unit in Active Directory and ignore everything els...
by
Mobyd
New Member
in
Getting Data In
05-14-2025
|
0
|
2
| ||
|
|
I have a field with the system's IP in it and am trying to add additional fields during ingest. It works if the IP f...
by
buzzard192
Explorer
in
Getting Data In
06-06-2023
|
0
|
4
| ||
|
Hello Splunkers,I have a small question, what is the best practice (or for what reasons) should I use Syslog or TCP c...
by
GaetanVP
Contributor
in
Getting Data In
10-03-2022
|
0
|
8
| ||
|
Hello, I am new to the Splunk interface and I have been recently given a task to configure Splunk to monitor the foll...
by
sgutierrez
Engager
in
Getting Data In
06-17-2019
|
1
|
4
| ||
|
|
I ma trying to onboard the %SystemRoot%\System32\Winevt\Logs\Microsoft-AzureADPasswordProtection-DCAgent%4Admin.evtx ...
by
Dilsheer_P
Loves-to-Learn Lots
in
Getting Data In
12-26-2024
|
0
|
2
| ||
|
|
I have the following transforms.conf file:
[pan_src_user]INGEST_EVAL=src_user_idx=json_extract(lookup("user_ip_mapp...
by
Niro
Explorer
in
Getting Data In
01-03-2024
|
0
|
10
| ||
|
|
I need to use federated search which does not support search time lookup at this time in splunk 8.2.2.1.
I came acr...
by
patelmc
Explorer
in
Getting Data In
11-08-2021
|
0
|
2
| ||
|
|
I have syslog events being written to a HF locally via syslog-ng - these events are then consumed via file reader and...
by
Skins
Path Finder
in
Getting Data In
02-18-2024
|
0
|
3
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Top Labels
-
add-on
2 -
administration
11 -
AIX
1 -
audit
1 -
blacklist
90 -
CLI
1 -
configuration
29 -
CSV
203 -
data
432 -
development
5 -
encryption
1 -
eval
2 -
field extraction
535 -
fields
4 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
897 -
host
152 -
HTTP Event Collector
420 -
index
527 -
indexer
677 -
indexing performance
1 -
inputs.conf
807 -
installation
4 -
intermediate forwarder
133 -
introduction
3 -
JSON
379 -
kvstore
1 -
Linux
430 -
login
1 -
Mac
30 -
metadata
1 -
metrics
2 -
modular input
182 -
monitor
303 -
monitoring console
1 -
other
24 -
proactive Splunk component monitoring
2 -
props.conf
938 -
regex
5 -
saved search
2 -
scripted input
237 -
search
1 -
search head
2 -
source
281 -
sourcetype
470 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
300 -
time
203 -
transforms.conf
550 -
troubleshooting
15 -
universal forwarder
1,506 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
14 -
whitelist
60 -
Windows
571 -
XML
89
- « Previous « Previous
- Next » Next »
Get Updates on the Splunk Community!
SplunkTrust Application Period is Officially OPEN!
It's that time, folks! The application/nomination period for the 2025 SplunkTrust is officially open!
If you ...
Splunk Answers Content Calendar, June Edition II
Get ready to dive into Splunk Dashboard panels this week! We'll be tackling common questions around ...
Splunk Observability Cloud's AI Assistant in Action Series: Auditing Compliance and ...
This is the third post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...
