Getting Data In

Community Activity

Setting up indexes.conf Hi, I am setting indexes.conf file where I am going to fix homepath and coldpah sizes. for ex.- [myindex] homePath ... by ips_mandar Builder in Getting Data In 02-02-2020 0 2	0	2
how to view datasets Within splunk cloud, I suspect we are whitelisting a list of approved snmp servers. I need to "whitelist" a new snmp ... by trojan_81 Path Finder in Getting Data In 02-02-2020 0 1	0	1
What will the JSON Path for breaking this JSON be while ingesting it in Splunk ? Please note that I want the JSON path expression and want to break this before ingesting it splunk and not to use spa... by beingkaran New Member in Getting Data In 02-01-2020 0 6	0	6
createssl server-cert on windows server 2012 indexer (kv store failing over cert errors) I am trying to generate a new cert for my kv store to work properly (I am having this problem - https:// answers.splu... by RDAVISS Path Finder in Getting Data In 02-01-2020 0 3	0	3
Windows Machines not rebooted in the last 45 days Hello all, I am trying to build a report of any windows machines not rebooted in the last 45 days and just need som... by tkerr1357 Path Finder in Getting Data In 02-01-2020 0 3	0	3
Nullqueue Windows Paths Regex Trying to send all events with this contained to nullqueue: Host Application = C:\WINDOWS\system32\WindowsPowerShell... by gclaytontmwa New Member in Getting Data In 02-01-2020 0 1	0	1
What is the process of decommissioning indexers? When you run the offline command permanently on an indexer. 1) How much time does it take to reassign the data to ot... by vrmandadi Builder in Getting Data In 01-31-2020 0 5	0	5
How can I upload a very large csv file into Splunk? My customer has some very large csv files that are only updating about 200 events/rows of the data into Splunk. "A... by nls7010 Path Finder in Getting Data In 01-31-2020 0 3	0	3
How to define a Windows monitor stanza containing a space in the path? When defining a monitoring path in inputs.conf with space in the path, any Windows directory path with space in it is... by donnyintown Engager in Getting Data In 01-31-2020 2 6	2	6
_time is wrong Hello i'm creating a sample of some poc so i added data manually from the "add data" option. when reviewing the tim... by sarit_s Communicator in Getting Data In 01-31-2020 0 9	0	9
Cloud Indexers Hi Team, How to know whether all the indexers are working in a balanced way? We have 14 cloud indexers and we need t... by VijaySrrie Builder in Getting Data In 01-31-2020 0 1	0	1
Working with CSV I have CSV like this- PPAGE_ID1 PPAGE_ID2 PPAGE_ID3 PPAGE_ID4 PPAGE_ID5 PPAGE_ID6 1-Jan 123 123 ... by reverse Contributor in Getting Data In 01-31-2020 0 5	0	5
Regex for Line Break props.conf Hello Splunkers, Any Regex geniuses that can help line break the below logs. Ideally remove the text in the red an... by nathanluke86 Communicator in Getting Data In 01-31-2020 0 9	0	9
help with the dashboard time calculation needed Hello, I have relatively easy issue I am struggling with. I would like to calculate the time difference in seconds b... by damucka Builder in Getting Data In 01-31-2020 0 2	0	2
How to write dynamic rest api script in Shell?? Hi All, I was writing one script in shell for getting data though rest api . Below is the connect of the script `... by pal_sumit1 Path Finder in Getting Data In 01-31-2020 0 1	0	1
How do I group unstructured events based on errorcode that they contain in body? I have some base splunk query which gives me list of events which has body mentioned below - event 1. {"Errors":{"Er... by dhirajnangar Engager in Getting Data In 01-31-2020 0 2	0	2
Inconsistent indexing time on CSV monitor We have been using daily CSV exports from our "X" monitoring servers that we then display on our performance board ea... by swamysanjanaput Explorer in Getting Data In 01-31-2020 0 5	0	5
Sourcetype renaming not taking Following the documentation for sourcetype renaming, I still fail to get it working. I have added an entry in Source... by srich Explorer in Getting Data In 01-30-2020 0 5	0	5
how to delete duplicate events I messed up my production server - deleted by mistake some of the internal splunk indexes instead of deleting them ... by gooza Communicator in Getting Data In 01-30-2020 4 4	4	4
API json preview field As seen in https://docs.splunk.com/Documentation/Splunk/7.2.3/RESTUM/RESTusing#Example_B:_JSON_response_format_exampl... by grittonc Contributor in Getting Data In 01-30-2020 0 2	0	2
One record, two values per field? We've been acquiring data for some time now via manual imports with CSV files. We're finishing up the process of auto... by aaron_sakovich Path Finder in Getting Data In 01-30-2020 0 11	0	11
error after stopping and connecting to instance in aws Hi Everyone, I spinned up a new windows instance in aws, then i installed splunk application in that server. Then i ... by kancharlarajesh New Member in Getting Data In 01-30-2020 0 1	0	1
Universal Forwarder 8.0 upgrade path from 6.x We have a bunch of older 6.x universal forwarders that will be incompatible with an 8.0 Enterprise Splunk instance. ... by smiejascott New Member in Getting Data In 01-30-2020 0 4	0	4
How to filter our dashboard by each host or including all hosts? Hi, I'm trying to filter our dashboard by each host or including all hosts. We have many field(chart) in a dashboar... by summerura Explorer in Getting Data In 01-30-2020 0 5	0	5
How do you filter data from a log and send them to 2 splunk instances while discarding the rest? I'm trying to filter data from a log and send them to 2 splunk instances while discarding the rest. I've tried a lit... by melvinfuglem Explorer in Getting Data In 01-30-2020 0 4	0	4