Getting Data In

Community Activity

Forward raw syslog to third party server from Splunk Enterprise instance Hi, I have an all in one splunk enterprise environment with only Universal Forwarders. My requirement is to send all... by mkpmilestone New Member in Getting Data In 03-15-2020 0 0	0	0
JSON file event breaking parsing on universal forwarder I have a JSON file. Once I upload the file on the search head using the below stanza in props.conf it's indexed prop... by rayar Contributor in Getting Data In 03-15-2020 0 2	0	2
issue with Splunk batch input Hello All, I am ingesting compressed(.gz) log files into Splunk by putting it in $SPLUNK_HOME/var/spool/splunk folde... by bharat097 New Member in Getting Data In 03-14-2020 0 1	0	1
web gateway filter activity to urls i have 117 sites listed from homeland security. i need to check if any of our machine have visited them. We have McAf... by daveevad New Member in Getting Data In 03-13-2020 0 12	0	12
What are the pros and cons of running thousands of UFs as root We have thousands of UFs running as Unix root and we have discussions whether to keep it like that or run the UFs as ... by danielbb Motivator in Getting Data In 03-13-2020 0 1	0	1
How to group multiple machines and user session time into a readable chart Hi all! I am currently working on a dashboard metrics project that involves me attempting to create a dashboard pane... by earonwilliams12 New Member in Getting Data In 03-13-2020 0 2	0	2
Service item.update causes modular input to restart In my modular input I want to update a configuration setting between runs so I don't poll for the same data again and... by aronsemle New Member in Getting Data In 03-13-2020 0 0	0	0
Help with converting epoch to human readable at index time I have json format data with a field called uploadDate .This has values like /Date(1584037059228)/ , /Date(15840332... by vrmandadi Builder in Getting Data In 03-13-2020 0 4	0	4
How to send a specific index from one indexer to another without a heavy forwarder So we have a client system that has their own Splunk indexer. For certain reasons they do not want their splunk univ... by troyfred Explorer in Getting Data In 03-13-2020 1 3	1	3
How to assign "source" during a search after a conditional statement? I am creating a dashboard to show all Linux command line history per user and I would like to create an input where y... by ricotries Communicator in Getting Data In 03-12-2020 0 7	0	7
Is it possible to install multiple Universal Forwarders on Windows? Can I install multiple Universal Forwarders on Windows? by joey18684 Engager in Getting Data In 03-12-2020 1 7	1	7
Splunk Cloud: How to ingest data using API? Is there a way to ingest data in Splunk using API (and without universal forwarder) if data is captured by native age... by snigdhasaxena Communicator in Getting Data In 03-12-2020 1 3	1	3
Why does service.export REST API fail when _raw is not excluded? Using Java API and requesting a streaming export from Splunk a search like this: search index="client_ndx" sourcetyp... by dsmith14 New Member in Getting Data In 03-12-2020 0 2	0	2
Support for multiple CA for universal forwarder to heavy forwarder connections We are working with mutiple platforms that will send log data to heavy forwarders. We want to encrypt and if possible... by thscheidegger Explorer in Getting Data In 03-12-2020 0 2	0	2
Power consumption logging logger Hello, everyone! I need to understand how much power usage my pc,servers,network devices (consumption). I want to mon... by sh_bolatbekov New Member in Getting Data In 03-12-2020 0 0	0	0
Time Range Picker doesn't apply to search, but modifiers work Hello everyone, I'm faced with an issue of using Time Range Picker. When I put into search bar with this "sourcetype... by stonelzhangh Observer in Getting Data In 03-11-2020 0 0	0	0
Monitoring Polycom syslog with Splunk Hi all, We are trying to analyze the Syslog from Polycom, such as server.log, access.log, etc. However, we don't u... by xzou_splunk Splunk Employee in Getting Data In 03-11-2020 0 4	0	4
how to send the local file using splunk forwarder docker image? splunkuniversalforwarder: image: splunk/universalforwarder environment: - SPLUNK_START_AR... by johnbaekkkk New Member in Getting Data In 03-11-2020 0 1	0	1
Index entire file content as one event I am trying to index a file and i dont see why the events are broken. I have tried defining line breaker setting both... by sdkp03 Communicator in Getting Data In 03-11-2020 0 8	0	8
I am a Splunk Cloud customer. I would like access to the API. What do I need to do? I have a single-instance (rainmaker) deployment, how do I gain access? I have a large (stackmaker) deployment, how do... by lagnone_splunk Splunk Employee in Getting Data In 03-11-2020 2 3	2	3
How to extract a JSON value based on a condition I have payload as below and I need the StartTime and EndTime values where the payload has the first IsAvailable is eq... by charan986 Engager in Getting Data In 03-11-2020 0 10	0	10
how can I use log filename to set "host" "date" Hi I have log files like this: log.machine03.20200310.bz2 log.machine04.20200310.bz2 log.machine05.20200310.bz2 th... by indeed_2000 Motivator in Getting Data In 03-11-2020 0 4	0	4
Quiestions about Determine forwarder-indexer compatibility. Hi team! I am preparing an update process and there is likely to be a mismatch of versions between the indexer and t... by christianubeda Path Finder in Getting Data In 03-11-2020 0 3	0	3
How to split multiline event on output Hi, I have windows XML logs in input of my Heavy Forwarder (via the universal forwarder with the TA_windows). When ... by paulquinonero New Member in Getting Data In 03-11-2020 0 7	0	7
Is there a REST API for putting a Cluster Master into Maintenance mode? I was just curious about this since I couldn't find anything on it in the following page: https://docs.splunk.com/Do... by mpham07 Path Finder in Getting Data In 03-11-2020 0 1	0	1