| Thread Info | |||||
|---|---|---|---|---|---|
| 
        Hello.
  Trying to test a sourcetype using "oneshot".  Although we were able to add raw data using "oneshot" the firs...
        
         
           by 
           
                
                    
                        vpsmax
                    
                
           
             
             
               Path Finder
             
           
           in
           Getting Data In
           
           
              
               09-17-2020
             
           
         
        | 
		
		0
   | 
	  
	  3
	 | |||
| 
        I am attempting to test a SEDCMD for event manipulation and it does not appear this is possible via oneshot? When I t...
        
         
           by 
           
                
                    
                        markconlin
                    
                
           
             
             
               Path Finder
             
           
           in
           Getting Data In
           
           
              
               08-04-2017
             
           
         
        | 
		
		0
   | 
	  
	  2
	 | |||
| 
        I'm using a distributed Splunk Enterprise environment with over 15 peers at the Indexer Tier.  I have some JSON data ...
        
         
           by 
           
                
                    
                        NullZero
                    
                
           
             
             
               Path Finder
             
           
           in
           Getting Data In
           
           
              
               10-17-2022
             
           
         
        | 
		
		0
   | 
	  
	  4
	 | |||
| 
        Hi Folks, 
  I am trying to backlist the gz files in input.conf. But somehow the blacklist doesn't work properly. 
  ...
        
         
           by 
           
                
                    
                        sagar_shubham23
                    
                
           
             
             
               Explorer
             
           
           in
           Getting Data In
           
           
              
               05-12-2023
             
           
         
        | 
		
		0
   | 
	  
	  3
	 | |||
| 
        Suppose I have `/var/log/nginx/access.log` and then a dozen files in the same directory named like `access.log-<date>...
        
         
           by 
           
                
                    
                        jm_tesla
                    
                
           
             
             
               Engager
             
           
           in
           Getting Data In
           
           
              
               09-03-2024
             
           
         
        | 
		
		0
   | 
	  
	  5
	 | |||
| 
        Hi everyone,
  I’m currently sending vCenter logs via syslog to Splunk and have ensured that the syslog configuration...
        
         
           by 
           
                
                    
                        ryanf
                    
                
           
             
             
               Engager
             
           
           in
           Getting Data In
           
           
              
               09-05-2024
             
           
         
        | 
		
		0
   | 
	  
	  1
	 | |||
| 
        Hi,
   
  The Splunk Heavy Forwarders and Deployment Servers were running under Splunk user. Unfortunately, during th...
        
         
           by 
           
                
                    
                        Ricco19
                    
                
           
             
             
               Loves-to-Learn
             
           
           in
           Getting Data In
           
           
              
               09-05-2024
             
           
         
        | 
		
		0
   | 
	  
	  1
	 | |||
| 
        We have been using Splunk on a Windows server without issue.  It ingested logs from Vmware hosts, networking hardware...
        
         
           by 
           
                
                    
                        rweales
                    
                
           
             
             
               Explorer
             
           
           in
           Getting Data In
           
           
              
               07-09-2024
             
           
         
        | 
		
		0
   | 
	  
	  9
	 | |||
| 
        Hello all, implementing some routing at the moment in order to forward a subset of data to a third party syslog syste...
        
         
           by 
           
                
                    
                        solman07
                    
                
           
             
             
               New Member
             
           
           in
           Getting Data In
           
           
              
               09-04-2024
             
           
         
        | 
		
		0
   | 
	  
	  1
	 | |||
| 
        We are working with several remote datasets that are combined to give our end user a specific result.  
  Federated S...
        
         
           by 
           
                
                    
                        discenzadoe
                    
                
           
             
             
               Explorer
             
           
           in
           Getting Data In
           
           
              
               03-16-2022
             
           
         
        | 
		
		0
   | 
	  
	  3
	 | |||
| 
        Hello,
   
  We are ingesting Checkpoint logs through an Edge Processor to our SCP. We have deployed Splunk Add-on fo...
        
         
           by 
           
                
                    
                        adrifesa95
                    
                
           
             
             
               Engager
             
           
           in
           Getting Data In
           
           
              
               06-06-2024
             
           
         
        | 
		
		0
   | 
	  
	  2
	 | |||
| 
        Hi,
  I have a splunk search which give back the testcase_id's.
  I need a button which call a rest API request.
  Re...
        
         
           by 
           
                
                    
                        kig121
                    
                
           
             
             
               Loves-to-Learn Lots
             
           
           in
           Getting Data In
           
           
              
               06-09-2021
             
           
         
        | 
		
		0
   | 
	  
	  5
	 | |||
| 
        I am trying to route metric type events to a null queue to avoid indexing them but they are still coming through.  An...
        
         
           by 
           
                
                    
                        markhvesta
                    
                
           
             
             
               Path Finder
             
           
           in
           Getting Data In
           
           
              
               01-18-2022
             
           
         
        | 
		
		0
   | 
	  
	  6
	 | |||
| 
        I have events from Trellix Hx appliance and i need to adjust _time of the log events
   
  because it coming as 9/3/2...
        
         
           by 
           
                
                    
                        KhalidAlharthi
                    
                
           
             
             
               Explorer
             
           
           in
           Getting Data In
           
           
              
               09-03-2024
             
           
         
        | 
		
		0
   | 
	  
	  2
	 | |||
| 
        Hello, community, 
  I need help reducing Events containing 4688 and ParentProcessName=*splunkd.exe 
  There is an ex...
        
         
           by 
           
                
                    
                        DanAlexander
                    
                
           
             
             
               Communicator
             
           
           in
           Getting Data In
           
           
              
               06-14-2023
             
           
         
        | 
		
		0
   | 
	  
	  2
	 | |||
| 
        Hello,
  This is my first experience with Splunk as I am setting up a lab.
  in VirtualBox I have:
  VM1: Act as serv...
        
         
           by 
           
                
                    
                        Dyrock
                    
                
           
             
             
               Engager
             
           
           in
           Getting Data In
           
           
              
               08-29-2024
             
           
         
        | 
		
		0
   | 
	  
	  1
	 | |||
| 
        Hello! I am trying to collect 3 additional Windows Event logs and I have added them in the inputs.conf, for example
 ...
        
         
           by 
           
                
                    
                        UnsuperviseLeon
                    
                
           
             
             
               Loves-to-Learn
             
           
           in
           Getting Data In
           
           
              
               08-27-2024
             
           
         
        | 
		
		0
   | 
	  
	  5
	 | |||
| 
        Background
  I have a very legacy application with bad/inconsistent log formatting, and I want to be able to somehow ...
        
         
           by 
           
                
                    
                        gchappel
                    
                
           
             
             
               Observer
             
           
           in
           Getting Data In
           
           
              
               08-29-2024
             
           
         
        | 
		
		0
   | 
	  
	  2
	 | |||
| 
        Are Smartstore buckets uploaded to S3 immutable?  We've been using Smartstore for almost a year and I have never seen...
        
         
           by 
           
                
                    
                        thormanrd
                    
                
           
             
             
               Path Finder
             
           
           in
           Getting Data In
           
           
              
               02-12-2021
             
           
         
        | 
		
		0
   | 
	  
	  4
	 | |||
| 
        Hello,I am currently working on project that involves integrating Splunk with Azure Virtual Desktop (AVD). Could you ...
        
         
           by 
           
                
                    
                        BRFZ
                    
                
           
             
             
               Communicator
             
           
           in
           Getting Data In
           
           
              
               08-29-2024
             
           
         
        | 
		
		0
   | 
	  
	  0
	 | |||
| 
        Hello,
  Need an urgent help.
  I am using REST API Modular input and the problem is i am not able to set the paramet...
        
         
           by 
           
                
                    
                        zubairsp
                    
                
           
             
             
               Explorer
             
           
           in
           Getting Data In
           
           
              
               08-28-2024
             
           
         
        | 
		
		0
   | 
	  
	  4
	 | |||
| 
        Hi all, hoping someone can help me. 
  We have a number of Windows servers with the Universal Forwarder installed (9....
        
         
           by 
           
                
                    
                        northernchap
                    
                
           
             
             
               Observer
             
           
           in
           Getting Data In
           
           
              
               08-28-2024
             
           
         
        | 
		
		0
   | 
	  
	  1
	 | |||
| 
        We have below data in json format, i need help with a custom json response handler so splunk can break every event se...
        
         
           by 
           
                
                    
                        zubairsp
                    
                
           
             
             
               Explorer
             
           
           in
           Getting Data In
           
           
              
               08-29-2024
             
           
         
        | 
		
		0
   | 
	  
	  1
	 | |||
| 
        Hi there,
  i have a file monitoring stanza on a universal forwarder where i filter using transforms.conf to only get...
        
         
           by 
           
                
                    
                        TheEggi98
                    
                
           
             
             
               Path Finder
             
           
           in
           Getting Data In
           
           
              
               08-28-2024
             
           
         
        | 
		
		0
   | 
	  
	  5
	 | |||
| 
        Hi, recently we upgraded all of our Universal forwaders (UFs) from various versions of 5.x to 6.1.4 
  We discovered ...
        
         
           by 
           
                
                    
                        t9445
                    
                
           
             
             
               Path Finder
             
           
           in
           Getting Data In
           
           
              
               11-01-2014
             
           
         
        | 
		
		0
   | 
	  
	  4
	 |