Getting Data In

Community Activity

JSON events with INDEXED_EXTRACTIONS making each extracted field multivalue Hi, I have an issue with JSON events having multivalue fields. We are using scripted input to ingest the data. The ... by aknsun Path Finder in Getting Data In 08-22-2019 0 2	0	2
send to nullqueue events which have more than 100 lines I have an XML file which has events made by many rows. I would like to send to null queue the events which have more ... by robertosegantin Path Finder in Getting Data In 08-22-2019 0 7	0	7
How to configure Splunk Monitor and KEPServerEX? Hi all, I have beginning with Splunk. I want comunicate my asset (PLC Rockwell) with Splunk through of TCP protocol... by leonardo_einsfe New Member in Getting Data In 08-22-2019 0 0	0	0
snmp trap to CA spectrum Hi, I have the following information captured in splunk rule=epm-rogue-mac-ep-epmacrogue subject=oper-state-chan... by surekhasplunk Communicator in Getting Data In 08-22-2019 0 5	0	5
change data upon indexing Admin-0, Admin-1, Admin-2 --> Admin Hi, I'm reading data from a JMeter test. One field is either named Admin or Admin-0, Admin-1 or Admin-2. The field i... by mhornste Path Finder in Getting Data In 08-22-2019 0 6	0	6
Logs are getting truncated after the forwarding has been setup into splunk The data in event 1 is incomplete and the rest of it is getting populated into event2 and so on . If i am not wrong ,... by Sujithkumarkb Observer in Getting Data In 08-21-2019 0 2	0	2
Does useACK=true in inputs.conf [batch://] stanza ensure that the file will be indexed BEFORE being deleted? I have an application which writes .json files into a directory. I would like to be able to monitor the directory a... by lyndac Contributor in Getting Data In 08-21-2019 0 3	0	3
Windows Blacklist Pattern Match Issue I can't think of a better way to phrase my question without it being a sentence. The issue I'm having is my blacklist... by bwheelock Path Finder in Getting Data In 08-21-2019 0 3	0	3
After moving Windows Event Logs to a non-default location, what edits to inputs.conf are needed for logs to be forwarded? I'm using the Splunk Universal Forwarders on our Citrix XenApp servers to forward logs to Splunk Enterprise. Besides ... by aszbikowski Engager in Getting Data In 08-21-2019 2 2	2	2
how much performance affect filter events in indexer? Hello, how much performance affect filter events in indexer? by rjfv8205 Path Finder in Getting Data In 08-21-2019 0 1	0	1
Blob Storage as Cold Storage: Index Validation on Splunk service start Hey All, Our Splunk environment is deployed in the Azure cloud as an "on-prem" installation and we are trying to use... by adalbor Builder in Getting Data In 08-21-2019 0 1	0	1
Syslog forwarding and rewrite of host I am forwarding events from a group of servers to an Indexer by way of a Splunk light forwarder. I have forwarding... by approachct Path Finder in Getting Data In 08-21-2019 0 7	0	7
How does Splunk handle end of file? Good evening fellow Splunkthiasts, can anyone explain in detail, how Splunk breaks the events when it finds the end o... by eregon Path Finder in Getting Data In 08-21-2019 0 2	0	2
Filebeat to Splunk Http Event Collector? All, Has anyone ever setup Filebeat to send data to Splunk's HEC? If so mind sharing your config? Thanks -Daniel by daniel333 Builder in Getting Data In 08-20-2019 0 1	0	1
Why are we not receiving any logging with transforms.conf? All, I have a 3 part TRANSFORMS.conf in my props.conf, when enable I receive no logging at all. How ever I am not s... by daniel333 Builder in Getting Data In 08-20-2019 0 1	0	1
Can I send Windows Event Forwarded events direct to Splunk? I heard a rumour that there was a Splunk Add-On that allowed it to act as a 'Windows Event Collector' Server, and so ... by port7 Explorer in Getting Data In 08-20-2019 0 7	0	7
Access splunk Rest API using OAuth? Specially using https://tools.ietf.org/html/draft-ietf-oauth-device-flow-07 How do use device authentication flow for... by yashanantha New Member in Getting Data In 08-20-2019 0 1	0	1
Splunk Forwarder 6.1.4 - no site defined in server.conf, Could not bind to Port 8090 Hello, Please move if in wrong forum, I have seen many responses to these questions, but looking for others that had... by BLRINGLER Explorer in Getting Data In 08-20-2019 0 5	0	5
Filter data on indexer or heavy forwarder? Hello, actually we don't have heavy forwarder instance. Is it possible filter events in indexer when recieve data fr... by rjfv8205 Path Finder in Getting Data In 08-20-2019 0 2	0	2
How SPLUNK can index external application's REST API which is having token based Authentication Hi All, We are able to successfully index REST API in SPLUNK by both ADD ON Builder and Rest Modular Input(REST_TA).... by aritratony New Member in Getting Data In 08-20-2019 0 1	0	1
install splunk by local user to monitor remote server logs windows os I have data stored on one windows os server now I want to install splunk heavy forwarder on another windows server by... by ips_mandar Builder in Getting Data In 08-20-2019 0 2	0	2
how to solve Time difference issue? Hi Guys, I'm getting the time difference of events in splunk SH. I've also tried to put TZ = UTC in props.conf of an... by ssharma09 Explorer in Getting Data In 08-20-2019 0 2	0	2
Filtering data before indexing with script Hi all, I have a very longs logs that I would like to filter before indexing/ I have some patterns that interesting m... by alisaf New Member in Getting Data In 08-20-2019 0 1	0	1
Where to define sourcetypes with Splunk Cloud? I'm having issues ingesting data correctly as custom sourcetype defined in Splunk Cloud are completely ignored when s... by packland Path Finder in Getting Data In 08-20-2019 0 2	0	2
How to upload a .csv file onto a Splunk remote server using Python? Hi all, I am trying to upload a .csv file onto a remote Splunk server through the use of a Python script and I am ha... by vkannampuzha Explorer in Getting Data In 08-20-2019 0 4	0	4