Getting Data In

Community Activity

what is the best way to forward the syslog Hi Folks, I would like to know the best method and recommended way to forward the syslogs. 1. syslog-ng -> ... by sridharlakshman New Member in Getting Data In 08-01-2019 0 1	0	1
Splunk dashboard "could not create search" on external network Hi All, I have a Splunk environment which works internally using the IP address. But when I tried accessing it exte... by jadengoho Builder in Getting Data In 07-31-2019 1 9	1	9
HTTP collector , pass the auth token within the URL Thanks in advance. The idea is to receive JSON message from Twilio with the SMS response. But in the Twilio's setti... by rsokolova Path Finder in Getting Data In 07-31-2019 0 2	0	2
How to check the total usage percentage by Windows server memory? Hi all, How do you check the total % of memory being used by a windows server. Which Performance counter can help u... by omprakash9998 Path Finder in Getting Data In 07-31-2019 0 7	0	7
How much data should be sent to one forwarder? Hello, I am setting up a log collector with a Universal Forwarder attached for collecting network logs (syslog-ng) an... by nkingsbury Engager in Getting Data In 07-31-2019 0 6	0	6
Help with docker Splunk logging driver URL change We are in the process of changing our Splunk web DNS name and securing it with https. We are using Splunk logging d... by ajames12 Engager in Getting Data In 07-31-2019 0 0	0	0
Forward data to third-party systems from splunk Hi, Splunk Version: 7.1.1 we are planning to send splunk existing data to third-party system called Champ. though i... by niha1318 New Member in Getting Data In 07-31-2019 0 1	0	1
I already have a source of gauged metrics accessible by http. How can Splunk PULL those? I already have a source of gauged metrics accessible by http. How can Splunk PULL those? I cannot PUSH those metrics... by gurpal2000 New Member in Getting Data In 07-31-2019 0 1	0	1
Error parsing dashboard XML: The URI to be decoded is not a valid encoding. Go to "Edit Source" to fix Windows Overview Dashboard error. Error parsing dashboard XML: The URI to be decoded is not a valid encoding. Go to "... by connorgoldenNav New Member in Getting Data In 07-31-2019 0 0	0	0
What is the best practice to send logging from mobile devices to Splunk? Hi everyone, currently i'm investigating what the best practice is to send logging from mobile devices (Android) to ... by twassing Engager in Getting Data In 07-31-2019 0 2	0	2
feed Splunk App for Windows Infrastructure without forwarders? I have a situation where management wants to see server status of some remote deployed servers, but due mostly to pol... by DaClyde Contributor in Getting Data In 07-31-2019 0 1	0	1
mask anonymize data by role Is there a way to mask or anonymize data in splunk by role such that one role (such as Admin) can see all the data o... by amitosr Explorer in Getting Data In 07-31-2019 1 5	1	5
Can you help me split a JSON event with regex in props.conf? Hi guru's: i have JSON data that looks like the below. { "BOMxmlDlTime": 0.6584670543670654, "TODAY-PLUS... by keiran_harris Path Finder in Getting Data In 07-31-2019 0 5	0	5
Does Splunk Universal Forwarder forward audit events Does Splunk Universal Forwarder forward audit event logs to Splunk _audit index? I can see Splunk HF's are forwarding... by ankithreddy777 Contributor in Getting Data In 07-31-2019 0 3	0	3
Active Directory not send logs for Splunk Hello, I am using splunk enterprise on linux server. I want to monitor active directory logs. I installed the univer... by mlog New Member in Getting Data In 07-31-2019 0 3	0	3
I want to take input from forwarder but before that I want to run python script I want to take input from forwarder but before that I want to run python script, just like in enterprise we can add d... by yashjain12yj New Member in Getting Data In 07-31-2019 0 3	0	3
Change hostname Hello All, I have several devices on our network that has one interface/IP address in our DMZ and a management IP ad... by edwardrose Contributor in Getting Data In 07-31-2019 0 10	0	10
Running into errors while disabling the legacy ciphers in splunk 7.2 I am trying to follow the document to disable the legacy ciphers in the Splunk 7.2, and I notice that the cluster mas... by vinkumar_splunk Splunk Employee in Getting Data In 07-31-2019 0 2	0	2
Xml logs event separation Hi. I have 10000 xml log output. like : {LOG DATE.../DATE TIME.../TIME CC.../CC AMOUNT.../AMOUNT ... by volkanyilmaz New Member in Getting Data In 07-31-2019 0 1	0	1
LDAP pre-cache If we have multiple users in our organization and do these users expire from the LDAP pre-cache? by swmishra_splunk Splunk Employee in Getting Data In 07-31-2019 0 1	0	1
How to configure a sourcetype for JSON data to parse each line as a distinct event? I have an application that logs out single line JSON statements. For some reason when I load this into Splunk, most o... by rfitch Path Finder in Getting Data In 07-30-2019 2 5	2	5
How to populate Meaningful form of data Hi Guys, Can you please help me, in framing a query. Like i have this kind of data structure: clk_ctrl: { [-] ... by Maniteja81 New Member in Getting Data In 07-30-2019 0 1	0	1
How do I create a report that can run automatically only when the indexer performs indexing after receiving an input file from forwarder instead of the scheduling with given fixed time ? How do I create a report that can run automatically only when the indexer performs indexing after receiving an input ... by vinaybandaru Path Finder in Getting Data In 07-30-2019 0 2	0	2
When trying to set up a distributed system, can you help me with the following error?: "Unable to distribute to peer, peer has status=2" distributed system. splunk 7.1.2 one SH + one indexer In the SH splunkd log: DistributedPeerManager - Distributed:... by xindeNokia Path Finder in Getting Data In 07-30-2019 4 4	4	4
What should the indexer queues be? After filling the tiny queues on the indexers, we would like to move to bigger queues. We are thinking about the fo... by danielbb Motivator in Getting Data In 07-30-2019 0 1	0	1