Getting Data In

Community Activity

How to assign "source" during a search after a conditional statement? I am creating a dashboard to show all Linux command line history per user and I would like to create an input where y... by ricotries Communicator in Getting Data In 03-12-2020 0 7	0	7
Is it possible to install multiple Universal Forwarders on Windows? Can I install multiple Universal Forwarders on Windows? by joey18684 Engager in Getting Data In 03-12-2020 1 7	1	7
Splunk Cloud: How to ingest data using API? Is there a way to ingest data in Splunk using API (and without universal forwarder) if data is captured by native age... by snigdhasaxena Communicator in Getting Data In 03-12-2020 1 3	1	3
Why does service.export REST API fail when _raw is not excluded? Using Java API and requesting a streaming export from Splunk a search like this: search index="client_ndx" sourcetyp... by dsmith14 New Member in Getting Data In 03-12-2020 0 2	0	2
Support for multiple CA for universal forwarder to heavy forwarder connections We are working with mutiple platforms that will send log data to heavy forwarders. We want to encrypt and if possible... by thscheidegger Explorer in Getting Data In 03-12-2020 0 2	0	2
Power consumption logging logger Hello, everyone! I need to understand how much power usage my pc,servers,network devices (consumption). I want to mon... by sh_bolatbekov New Member in Getting Data In 03-12-2020 0 0	0	0
Time Range Picker doesn't apply to search, but modifiers work Hello everyone, I'm faced with an issue of using Time Range Picker. When I put into search bar with this "sourcetype... by stonelzhangh Observer in Getting Data In 03-11-2020 0 0	0	0
Monitoring Polycom syslog with Splunk Hi all, We are trying to analyze the Syslog from Polycom, such as server.log, access.log, etc. However, we don't u... by xzou_splunk Splunk Employee in Getting Data In 03-11-2020 0 4	0	4
how to send the local file using splunk forwarder docker image? splunkuniversalforwarder: image: splunk/universalforwarder environment: - SPLUNK_START_AR... by johnbaekkkk New Member in Getting Data In 03-11-2020 0 1	0	1
Index entire file content as one event I am trying to index a file and i dont see why the events are broken. I have tried defining line breaker setting both... by sdkp03 Communicator in Getting Data In 03-11-2020 0 8	0	8
I am a Splunk Cloud customer. I would like access to the API. What do I need to do? I have a single-instance (rainmaker) deployment, how do I gain access? I have a large (stackmaker) deployment, how do... by lagnone_splunk Splunk Employee in Getting Data In 03-11-2020 2 3	2	3
How to extract a JSON value based on a condition I have payload as below and I need the StartTime and EndTime values where the payload has the first IsAvailable is eq... by charan986 Engager in Getting Data In 03-11-2020 0 10	0	10
how can I use log filename to set "host" "date" Hi I have log files like this: log.machine03.20200310.bz2 log.machine04.20200310.bz2 log.machine05.20200310.bz2 th... by indeed_2000 Motivator in Getting Data In 03-11-2020 0 4	0	4
Quiestions about Determine forwarder-indexer compatibility. Hi team! I am preparing an update process and there is likely to be a mismatch of versions between the indexer and t... by christianubeda Path Finder in Getting Data In 03-11-2020 0 3	0	3
How to split multiline event on output Hi, I have windows XML logs in input of my Heavy Forwarder (via the universal forwarder with the TA_windows). When ... by paulquinonero New Member in Getting Data In 03-11-2020 0 7	0	7
Is there a REST API for putting a Cluster Master into Maintenance mode? I was just curious about this since I couldn't find anything on it in the following page: https://docs.splunk.com/Do... by mpham07 Path Finder in Getting Data In 03-11-2020 0 1	0	1
Http Collector Cloud Trial - 406 Not Acceptable Hello, I'm trying out the Splunk Http Event Collector but not able to make a request! curl "https://myinstance123.c... by ee_admin New Member in Getting Data In 03-11-2020 0 1	0	1
output syslog blocked at 1000 characters Hi, I want tu use syslog-ng to send windows logs from a heavy forwarder to an indexer. But I got a problem, the mess... by paulquinonero New Member in Getting Data In 03-11-2020 0 4	0	4
Compare splunk query with lookup and output the what is different in the query I have a splunk query that gives me the different values of an appid and csv file which has a single field called app... by vrmandadi Builder in Getting Data In 03-10-2020 0 11	0	11
How can I mask the values for two identical keys in a multi-line event at index time? I have a multiline event with two identical keys that I need to mask values for, as shown below. I am NOT especially ... by w199284 Explorer in Getting Data In 03-10-2020 0 6	0	6
Cisco ASA SYSLOG ASA-6-302016 field error For the following SYSLOG message (ASA-6-302015), Splunk parses it as follows: %ASA-6-302015: Built outbound UDP conn... by rboudreau New Member in Getting Data In 03-10-2020 0 7	0	7
Shuold I upgrade my universal forwarders when after I upgrade my HF? Hi team! Shuold I upgrade my universal forwarders when after I upgrade my HF? Data > UF > HF > Indexer Right now a... by christianubeda Path Finder in Getting Data In 03-10-2020 0 1	0	1
Connect splunk cloud to Palo alto firewall Hi, I just got a splunk cloud and i want to connect it with palo alto firewall using API. which steps do i need to f... by rajveer005 Engager in Getting Data In 03-10-2020 0 2	0	2
Moving Splunk Indexer servers to a different location Hello, I am planning to move Splunk indexers to a different location. These indexers are also part of the multi-site... by kiril123 Path Finder in Getting Data In 03-10-2020 0 1	0	1
Help with merging CSV files needed Hello, I have the situation, where I evaluate the "All Time" logs initially and save the results to the csv file: .... by damucka Builder in Getting Data In 03-10-2020 0 1	0	1