Getting Data In

Community Activity

How to set time zone of logs by source? I’m trying to specify that logs from a certain source coming from a UF are UTC. This should be pretty straightforward... by ehowardl3 Path Finder in Getting Data In 01-07-2020 0 0	0	0
Making API Call to Splunk from Squarespace (splunk-sdk-JavaScript) I’m trying to implement api calls on my website hosted on Squarespace - has anyone had any success using splunk-sdk-j... by lianlim Engager in Getting Data In 01-07-2020 0 1	0	1
Find IN does not OUT Hi I have log file like this: 09:04:04.042 module1: F[6]L: IN 09:04:01.417 module1: F[6]L: OUT 09:04:01.418 mod... by indeed_2000 Motivator in Getting Data In 01-07-2020 0 1	0	1
Is it possible to integrate logs to Splunk with REST API?? Is it possible to integrate logs with Splunk using REST API?? If yes please let me know the steps and the REST API co... by VijaySrrie Builder in Getting Data In 01-07-2020 0 3	0	3
Splunk - Adding stanza in input.conf file i am using Splunk enterprise trial version and trying to push the windows logs to Splunk from the customize location ... by rajiv_r Explorer in Getting Data In 01-07-2020 0 3	0	3
Unable to initialize modular input Hi, I designed a modular input using the splunk plugin for eclipse. After building the file with Ant, I installed th... by apetwal Engager in Getting Data In 01-07-2020 0 0	0	0
Why does checking the status of a forwarder make the forwarder stop running? Hello, I have multiple Splunk forwarders in my setup. I am writing a script in which I need to check if Splunk forwa... by AKG1_old1 Builder in Getting Data In 01-07-2020 0 2	0	2
Splunk is not showing full JSON data from Chef Inspec log file on search I have a json log file generated from chef inspec tool that contains 1000+ lines of data. The log file looks somethin... by jayaprasad800 Engager in Getting Data In 01-06-2020 0 7	0	7
How to get the total size of data in a distributed Splunk deployment ignoring replication I would like to add a new indexer site to our distributed Splunk deployment but would like this new site to contain a... by vzedbny Engager in Getting Data In 01-06-2020 0 1	0	1
How to add additional fields to log4j-submitted JSON? We're using Splunk's "javalogging" JAR to send events to Splunk from our Java-application directly. This works, but t... by unitedmarsupial Path Finder in Getting Data In 01-06-2020 0 1	0	1
Syslog Json question Hello, I've got a question on getting Splunk to extract key value pairs from syslog json events. The events look li... by willemjongeneel Communicator in Getting Data In 01-06-2020 0 11	0	11
What is the easiest way to identify my universal forwarder versions I'm looking for a search that will let me check what forwarder revisions are installed on individual machines. Anyon... by conner9 Path Finder in Getting Data In 01-06-2020 1 5	1	5
Lookup table not found for Automatic lookup I have created a lookup table suppose productext.csv. I went to the Automatic lookup screen and selected the dropdown... by palisetty Communicator in Getting Data In 01-05-2020 0 2	0	2
Assigning sourcetype by host - UF Hi All, I have a UF which gets logs of syslog via UDP:514. I am trying to set sourcetypes by hosts' IPs but i can't ... by astatrial Contributor in Getting Data In 01-04-2020 0 2	0	2
How to configure forwarder filename with timestamp I have a custom application and the log gets created at 7:00 UTC every day. The log file will have timestamp in the f... by riyastk Observer in Getting Data In 01-04-2020 0 1	0	1
Getting List of the Universal forwarders Hi There, I wanted to get a list of forwarders from the metric logs. The base logs have confused me a lot. Below is... by ralam Explorer in Getting Data In 01-03-2020 0 2	0	2
Integrity Check of Installed Files datetime.xml Hello, After updating (replacing) the datetime.xml file in my Splunk, the following health check message appears. MS... by erlindemberg Explorer in Getting Data In 01-03-2020 0 2	0	2
Windows Defender ATP I have followed the various sets of instructions for sending Microsoft Defender ATP logs to Splunk, however I am gett... by balcv Contributor in Getting Data In 01-03-2020 1 3	1	3
json events not breaking properly trying to break events before incidentTicket event, but not breaking properly with BREAK_ONLY_BEFORE. props: [prd_... by fisuser1 Contributor in Getting Data In 01-03-2020 0 1	0	1
Splunk API output When I try the api endpoint curl -k -u username:passwd https://localhost:8089/servicesNS/admin/search/search/jobs/exp... by sreekaanth_91 New Member in Getting Data In 01-02-2020 0 0	0	0
Python script to upgrade forwarder Hi, Please give me the python script to upgrade rpm file of forwarder. Steps to upgrade 1) Get the rpm file from S... by VijaySrrie Builder in Getting Data In 01-02-2020 0 1	0	1
Capture data from scripted input I'm trying to so a simple ps for ssh connections from a specific user. I have created a python script ! /usr/bin/py... by tsheets13 Communicator in Getting Data In 01-02-2020 0 3	0	3
log file not parsing properly - multiple lines per event Hello, I have a file monitor for a log file where I am getting indexed data with multiple lines. Example of one ev... by dglass0215 Path Finder in Getting Data In 01-02-2020 0 2	0	2
How to get the SID (via rest api) for a single scheduled report previously created from the Web UI I have a number of scheduled reports previously created via the WEB UI following a template similar to the ones shown... by wmoy New Member in Getting Data In 01-02-2020 0 5	0	5
How to parse nested Json so I can extract parent process information that lines up attributes together? The am having some issues with extracting what I want out of the json that goes into splunk from Tanium for signal a... by doodoodonk Engager in Getting Data In 01-02-2020 0 1	0	1