Getting Data In

Community Activity

Indexing live XML data from large files We are having Splunk Enterprise version(7.1.0) for reading data from different indexes. But we have been provided la... by aritratony New Member in Getting Data In 08-05-2019 0 1	0	1
If there are two statements in a log, how to set a custom message if those two statements are existing in one log Hello All, Here is my sample data. "**19:30:06 C:\Pelibib\MBX\20190618193001755_MA07.MBX processed and deleted*... by mnarmada Path Finder in Getting Data In 08-05-2019 0 4	0	4
How to use split in search? Hi, how to me use a command split or other command that make two field from one? Example: Im get a token with text "... by sbimizry Engager in Getting Data In 08-05-2019 0 2	0	2
How to edit outputs.conf for universal forwarder in linux Hi, I was trying to edit outputs.conf for universal forwarder, but when i was searching for outputs.conf file in e... by raghu0463 Explorer in Getting Data In 08-05-2019 0 10	0	10
Script for install Splunk Forwarder on Windows? Hi; Is there script or bat file to install Splunk forwarder, I have tried script existing in the below link but not... by aalhabbash1 Path Finder in Getting Data In 08-04-2019 0 1	0	1
NSlookup on Network Tools App with Specified DNS Server? I am trying to write an alert in Splunk which will tell us if the 2 DNS servers we have setup for a domain are workin... by khavildar Explorer in Getting Data In 08-03-2019 0 2	0	2
How to add AWS ap-east-1 region to Splunk Add-On for Amazon Hi guys, Anyway to add ap-east-1 (Hong Kong) region to the Splunk Add-On for Amazon? ap-east-1 is a relatively new ... by goldjoy New Member in Getting Data In 08-03-2019 0 0	0	0
Splunk App Fortinet Fortigate I have firewall data coming to my syslog server.The syslog file gets rotated every 24 hours. Ive installed forwarder... by vinod94 Contributor in Getting Data In 08-03-2019 0 2	0	2
How to investigate crashing indexer Our indexers are in a cluster. We have 4 indexers and they are crashing once a week, I do not how to start investigat... by shivanandbm Explorer in Getting Data In 08-02-2019 0 2	0	2
Does Windows Server 2016 only produce xml logs? I have a Windows 2016 Server and I've got a UF sending windows event logs. They only come in as xml, even if I put r... by gregbo Communicator in Getting Data In 08-02-2019 0 1	0	1
Does "rex mode=sed" pass as SEDCMD regex check? Hello. I'm attempting to reduce the volume of log message with full text of terms and conditions, through using SEDCM... by selenith Engager in Getting Data In 08-02-2019 0 1	0	1
Microsoft Secure Score Is this possible include a Microsoft Secure Score Splunk Dashboard can someone provide the details for this by gotoole Loves-to-Learn Lots in Getting Data In 08-01-2019 0 0	0	0
Anonymize clear text credentials in Powershell logs using SEDCMD I am attempting to anonymize clear-text credentials passed via PowerShell referring to the splunk documentation to ... by geoffmx Explorer in Getting Data In 08-01-2019 0 5	0	5
Need to add _raw content into "Log Event" My Splunk alerts use the "Log Event" actions. How do I add the contents of _raw into the "Event" field? I tried $r... by fshimaya Engager in Getting Data In 08-01-2019 0 1	0	1
Logrotate question to Permit Splunk user to read syslog? All, I have /var/log/messages on a host I want Splunk to be able to read. Here is my log rotation config. Splunk us... by daniel333 Builder in Getting Data In 08-01-2019 0 0	0	0
python script return json, and show a table in search. I use python script to get json data thouth an API, and i want show them in a table in splunk search. the python scri... by xuehui New Member in Getting Data In 08-01-2019 0 1	0	1
Can anyone help me how to configure heavy forwarder? I installed the Splunk enterprise on Linux, I used universal forwarder and I could get my logs using it on my Splunk... by raghu0479 New Member in Getting Data In 08-01-2019 0 4	0	4
what is the best way to forward the syslog Hi Folks, I would like to know the best method and recommended way to forward the syslogs. 1. syslog-ng -> ... by sridharlakshman New Member in Getting Data In 08-01-2019 0 1	0	1
Splunk dashboard "could not create search" on external network Hi All, I have a Splunk environment which works internally using the IP address. But when I tried accessing it exte... by jadengoho Builder in Getting Data In 07-31-2019 1 9	1	9
HTTP collector , pass the auth token within the URL Thanks in advance. The idea is to receive JSON message from Twilio with the SMS response. But in the Twilio's setti... by rsokolova Path Finder in Getting Data In 07-31-2019 0 2	0	2
How to check the total usage percentage by Windows server memory? Hi all, How do you check the total % of memory being used by a windows server. Which Performance counter can help u... by omprakash9998 Path Finder in Getting Data In 07-31-2019 0 7	0	7
How much data should be sent to one forwarder? Hello, I am setting up a log collector with a Universal Forwarder attached for collecting network logs (syslog-ng) an... by nkingsbury Engager in Getting Data In 07-31-2019 0 6	0	6
Help with docker Splunk logging driver URL change We are in the process of changing our Splunk web DNS name and securing it with https. We are using Splunk logging d... by ajames12 Engager in Getting Data In 07-31-2019 0 0	0	0
Forward data to third-party systems from splunk Hi, Splunk Version: 7.1.1 we are planning to send splunk existing data to third-party system called Champ. though i... by niha1318 New Member in Getting Data In 07-31-2019 0 1	0	1
I already have a source of gauged metrics accessible by http. How can Splunk PULL those? I already have a source of gauged metrics accessible by http. How can Splunk PULL those? I cannot PUSH those metrics... by gurpal2000 New Member in Getting Data In 07-31-2019 0 1	0	1