Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
Hello,
I am trying to implement setting a specific index based on part of the hostname. For ALL of my data that I...
by
dglass0215
Path Finder
in
Getting Data In
07-17-2019
|
0
|
6
| ||
|
I want to know if below things are possible in splunk and if YES then How it can be achieved- 1. Below is sample even...
by
ips_mandar
Builder
in
Getting Data In
07-18-2019
|
0
|
5
| ||
|
|
I am trying to break the event based on the realm in the below example. My sourcetype "Iam_logs" is defined globally ...
by
Sujithkumarkb
Observer
in
Getting Data In
07-18-2019
|
0
|
1
| ||
|
|
I want to configure HTTP Event collector on one of the Heavy forwarder. initially i create the app with named splunk...
by
riqbal47010
Path Finder
in
Getting Data In
07-16-2019
|
0
|
3
| ||
|
|
I see below error while running installation script of Splunk Forwarder Add-on for WAS. $ python was_log_inputs.py Fi...
by
lalbsah
Engager
in
Getting Data In
05-21-2012
|
0
|
3
| ||
|
|
Each Realm entry should be an event, JSON is the source.
Event1:
{"realm":"/humapp","transactionId":"d9d6ba4e-...
by
Sujithkumarkb
Observer
in
Getting Data In
07-15-2019
|
0
|
5
| ||
|
I have file names like this "Patch-Data_2-1-2012.csv"
How do I use the date in the file name for the datestamp fo...
by
hartfoml
Motivator
in
Getting Data In
02-07-2012
|
2
|
5
| ||
|
Hello,
I am trying to configure Splunk Website Monitoring app to probe new application URLS. It was working fine, ...
by
vsrigane
Explorer
in
Getting Data In
07-18-2019
|
0
|
0
| ||
|
|
I have a cluster environment, 3 indexers and one Master indexer/DMC/LM, a deployment server, syslog-ng Heavy Forwarde...
by
MikeVenable
Path Finder
in
Getting Data In
07-14-2019
|
0
|
2
| ||
|
|
We're trying to index json formatted logs from kubernetes pods by removing the json formatting and making the logs ap...
by
vstariradev
Explorer
in
Getting Data In
07-18-2019
|
0
|
0
| ||
|
|
Seeing lots of "Brute Force Access Behavior Detected" notable events coming from Microsoft domain controllers. The co...
by
dsuddu
Engager
in
Getting Data In
09-20-2017
|
6
|
4
| ||
|
|
Not sure why the hostname for the monitor stanza below is not being parsed out...
directory is as follows: /mnt/l...
by
plumainwfs
New Member
in
Getting Data In
03-12-2017
|
0
|
2
| ||
|
|
I have installed the Splunk Add-on for Microsoft Windows App on the latest 6.0 Version on Splunk Enterprise 7.3 i am...
by
omri_p
Engager
in
Getting Data In
07-18-2019
|
0
|
0
| ||
|
|
Hello, I have a raw like this:
.success [{"importo":2,"tipologiaOperazione":"AAA"},{"importo":1.82,"tipologiaOpera...
by
3vi
Engager
in
Getting Data In
07-17-2019
|
0
|
2
| ||
|
|
I have a setup, where I have one production indexer and another one is development indexer. I want all the data to be...
by
saramamurthy_sp
Splunk Employee
in
Getting Data In
07-15-2019
|
0
|
2
| ||
|
I'm trying to minimize the amount of data from Kubernetes JSON events that are being indexed into my Splunk instance....
by
alanzchan
Path Finder
in
Getting Data In
03-16-2019
|
0
|
21
| ||
|
|
How can I run a powershell script on a Universal Forwarder on-demand instead of scheduling it in the inputs.conf and ...
by
kevinbullock
New Member
in
Getting Data In
07-17-2019
|
0
|
0
| ||
|
Hello Champions,
Need your help in extracting mixed data. Below is my sample data. I indexed it as a single event ...
by
nareshinsvu
Builder
in
Getting Data In
07-16-2019
|
0
|
3
| ||
|
|
I have a kvstore collection with ~50 000 records. I want to get count of records that satisfy some conditions, but I ...
by
asnegina
New Member
in
Getting Data In
07-17-2019
|
0
|
1
| ||
|
|
\etc\system\local\transforms.conf
[drop4768OK]
REGEX = EventCode=4768(.|\t|\r|\n)*Result.*Code.*0x0
DEST_KEY = que...
by
tmontney
Builder
in
Getting Data In
07-11-2019
|
0
|
12
| ||
|
I have a scripted input in Splunk that sends it's data to Splunk via STDOUT. Is there any way to run the script on-de...
by
jeff
Contributor
in
Getting Data In
12-14-2012
|
0
|
5
| ||
|
|
お世話になっております。 Splunk Webについてご質問があります。
現在インデックスサーバをスタンドアロンで構築し（OSはCentOS7） 設定のデータ入力→ファイルとディレクトリ→新しいローカルファイルとディレクトリから...
by
alffsadm
Explorer
in
Getting Data In
07-12-2019
|
1
|
5
| ||
|
|
I'm using host_regex on a Universal Forwarder.
inputs.conf
[monitor:///app/splunkforwarder/logs/container...
by
psyched4splunk
Explorer
in
Getting Data In
07-16-2019
|
0
|
6
| ||
|
|
Hi there, Is there anyway on Splunk search peer or Forwarder to filter the data. Like log messages that contain DEBUG...
by
rashi83
Path Finder
in
Getting Data In
07-16-2019
|
0
|
2
| ||
|
|
I'm currently collecting windows security events. And it's been good for seeing failures. But I cannot see 'what' wor...
by
TitanAE
New Member
in
Getting Data In
07-16-2019
|
0
|
0
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Claim a $25 Cisco Store Gift Card
Help us improve the Splunk Community and complete our survey today!
Top Labels
-
add-on
2 -
administration
12 -
AIX
1 -
audit
1 -
blacklist
92 -
CLI
1 -
configuration
32 -
CSV
206 -
data
467 -
development
5 -
encryption
1 -
eval
2 -
field extraction
548 -
fields
5 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
930 -
host
154 -
HTTP Event Collector
432 -
index
538 -
indexer
702 -
indexing performance
1 -
inputs.conf
826 -
installation
5 -
intermediate forwarder
140 -
introduction
3 -
JSON
387 -
kvstore
1 -
Linux
450 -
login
1 -
Mac
30 -
metadata
1 -
metrics
2 -
modular input
187 -
monitor
308 -
monitoring console
1 -
other
46 -
proactive Splunk component monitoring
2 -
props.conf
965 -
regex
5 -
saved search
2 -
scripted input
242 -
search
1 -
search head
2 -
source
290 -
sourcetype
489 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
312 -
time
204 -
transforms.conf
571 -
troubleshooting
15 -
universal forwarder
1,539 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
16 -
whitelist
60 -
Windows
582 -
XML
90
- « Previous
- Next »
Get Updates on the Splunk Community!
Reduce and Transform Your Firewall Data with Splunk Data Management
Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...
Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...
If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...
Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions
Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...
