Getting Data In

Community Activity

I want to parse the below structured data. I want only second and third field to get indexed and rest to be discarded. I am using the below configuration: Sample Data: FILED1\|FIELD2\|FIELD3\|FIELD4 INDIA\|AGRICULTURE\|HELLO\|200 AMERICA\|FOOD\|HELLO \|404 CHINA\|PEOPLE\|HI\|402 NEPA... by umeshagarwal New Member in Getting Data In 03-08-2020 0 7	0	7
Splunk Free License and Free Forwarding I recently downloaded Splunk. Right now, I am using the free license that came with Splunk software on three differe... by ericmoss Explorer in Getting Data In 03-08-2020 1 6	1	6
Help with Advanced Source Type I'm trying to create a custom source type which is reading a TSV log file and the 3 column in the file is a JSON payl... by jaredneedell Explorer in Getting Data In 03-06-2020 0 5	0	5
Why am I getting error "No indexers have reported into this pool today" and my indexer is not indexing any data? Hello, My Splunk indexer isn't indexing data and I get this error message: No indexers have reported into this pool... by Afef Communicator in Getting Data In 03-06-2020 0 12	0	12
Outputs.conf sslPassword not hashing for specific systems I have a test environment with similar devices (Windows 10 laptops that serve the same purpose and have the same soft... by ricotries Communicator in Getting Data In 03-06-2020 0 4	0	4
8.0.1 upgraded Heavy Forwarder- TcpOutputProc - Possible duplication of events We have a support ticket open, but I thought I'd also ask the community. Since upgrading our Splunk to 8.0.1 this one... by JDukeSplunk Builder in Getting Data In 03-06-2020 0 2	0	2
Manually setting source name We have discovered that on one of our servers, we had an error in the monitoring stanza and was not getting the logs ... by cboillot Contributor in Getting Data In 03-06-2020 0 2	0	2
Identifying Windows SSO Application logins Hi, I am currently working on a search that is supposed to tell me whether users went the prescribed CyberARK route o... by afx Contributor in Getting Data In 03-06-2020 0 0	0	0
How to fix TimeStamp issue for two different types of events from same source? A single source have two different types of events and two different types of timestamps. raw event-1: Request Set ... by snallam123 Path Finder in Getting Data In 03-06-2020 0 2	0	2
connection aborted error 104 connection reset by peer when i look into the Splunk logs it showing only few logs other logs are missing with error "connection aborted erro... by logloganathan Motivator in Getting Data In 03-06-2020 0 17	0	17
One UF isn't connecting to the indexer One of my forwarders is not connecting with the indexers. Another system that is identical is connecting just fine. ... by gregbo Communicator in Getting Data In 03-06-2020 0 3	0	3
Is load balancing in UF/HF bound to cause data imbalance on IDXC eventually? Is load balancing in HF and UF's outputs.conf bound to cause data imbalance on IDXC overt time? If yes, I wholeheart... by morethanyell Builder in Getting Data In 03-05-2020 0 2	0	2
why my sourcetype time extraction not take effect ? first a log sample: {"offset":44469279,"messages":"<190>Mar 5 2020 06:40:55 WH-USG-MAIN %%01POLICY/6/POLICYPERMIT(l)... by meg_li New Member in Getting Data In 03-05-2020 0 15	0	15
Given Netflow data with start/end time and total bits transfered, calculate total bandwith used per time second I am looking for an efficient way to calculate the total bandwidth used per second on a device from our netflow data.... by pestatp Path Finder in Getting Data In 03-05-2020 0 8	0	8
Identify Active Directory Groups that have Admin Privileges Does anyone have any SPL that would identify the following: Identify Active Directory Groups that have Admin Privile... by itsmevic Communicator in Getting Data In 03-05-2020 0 0	0	0
Trying to filter ASA syslogs before indexing to avoid license violations, why are our props and transforms configurations not working? I've created this filter and placed them in the config files mentioned below in the following directory: D:\Program ... by pnazario Explorer in Getting Data In 03-05-2020 0 13	0	13
Why is the sourcetype set as filename Hello I have some syslog data collected and forwarded to a custom path: /var/log/remote/2020/<month>/messages/<fi... by tkw03 Communicator in Getting Data In 03-05-2020 0 5	0	5
Sourcetype Inheritance: How to inherit parent sourcetype to child sourcetypes? Hope you all have faced this situation.. We got incoming mixed data from a single source (eg source=my_application.... by koshyk Super Champion in Getting Data In 03-05-2020 1 6	1	6
Can I send uncooked data from one HF to another? Hi, I have a scenario where I need to forward data from a HF to another HF but I need it to be uncooked so the recei... by tiaatim Path Finder in Getting Data In 03-05-2020 0 3	0	3
Use a heavy forwader to pull through WMI and send to Splunk cloud Hi all, In this particular situation we'd like to use a heavy forwader to be able to pull Windows event logs from w... by heskez Engager in Getting Data In 03-05-2020 0 4	0	4
Splitting multi-value field (json) Hello Splunkers, So I am having trouble with some json nested arrays that contain multiple latitude and longitude in... by nwenzl_splunk Splunk Employee in Getting Data In 03-05-2020 0 5	0	5
Not able to push data to splunk using python SDK I am using below code to push data to splunk using Python SDk,script is executed successfully but i am not seeing any... by rajanishsinght New Member in Getting Data In 03-05-2020 0 1	0	1
Why all my sourcetypes are not showing up in web GUI? Hi, I have an index with 7 sourcetypes. For a particular reason, I had to delete the index. Made a refresh, then I re... by rfeddal Engager in Getting Data In 03-05-2020 0 2	0	2
Speed up Search while Hi Currently I have some JSON files in this structure : { { Meta: .... } { Data: A, B: [ {key: value_b1}... by splumtk1 New Member in Getting Data In 03-04-2020 0 2	0	2
Splunk Forwarder ShutdownHandler Hi, I have set up 4 forwarders to communicate with my indexer. I already executed add forward-server and set deploy... by ptrckjncbngn New Member in Getting Data In 03-04-2020 0 0	0	0