Getting Data In

Community Activity

Configuring Splunk OTel Collector for Linux/Windows Log Collection (Splunk Cloud/Enterprise) As you may know, the Splunk OTel Collector can collect logs from Kubernetes and send them into Splunk Cloud/Enterpris... by jthurston Splunk Employee in Getting Data In 11-12-2024 0 0	0	0
TA for HP Storage Hei,We have onboarded data from HP Storage and I am not sure if there is any TA for this technology or how to extrac... by MadalinaT Engager in Getting Data In 11-12-2024 0 1	0	1
interval as a data input parameter I want my customer to be able to set the "interval" and control how frequent the module runs.I started with this:defa... by shai Explorer in Getting Data In 11-12-2024 0 4	0	4
Troubleshooting Slow Search Performance in Splunk with Large Datasets How can I troubleshoot slow search performance in Splunk when searching across large datasets?" by sajjadali1122 New Member in Getting Data In 11-11-2024 0 1	0	1
How can I find a listing of all universal forwarders that I have in my Splunk environment? Hello , Can you help me out How can I find a listing of all universal forwarders that I have in my Splunk environment... by Paramy Loves-to-Learn Lots in Getting Data In 11-11-2024 0 2	0	2
Upload failed with ERROR: Read Timeout I tried to upload a zip file. It showed "Upload failed ERROR: Read Timeout." I am using Windows. The file size is 191... by helpmesplunk Observer in Getting Data In 11-11-2024 0 0	0	0
Windows event log XML not parsing with KV_MODE = xml I have made the following change to a forwarder to send JUST applocker data as XML: [WinEventLog://Microsoft-Windows... by jpolcari Communicator in Getting Data In 11-09-2024 1 4	1	4
Timestamp fixing Hello Splunkers!!I want to extract the _time and match it to the events fields' timestamp while ingesting to Splunk. ... by LogUx Motivator in Getting Data In 11-09-2024 0 13	0	13
Syslog server configuration load balancer Hi, I am new to Splunk admin. We have a syslog server in our environment to collect logs from our network device. Our... by Karthikeya Communicator in Getting Data In 11-09-2024 0 5	0	5
Splunk HEC closes connection instead of re-using it Our apps send data to the Splunk HEC via HTTP POSTS. The apps are configured to use a connection pool, but after send... by onlineops Explorer in Getting Data In 11-08-2024 0 5	0	5
Syslog -- UF -- Indexer Hi all,We want to configure F5 WAF logs to Splunk. WAF team sending logs to our syslog server. In our syslog server U... by splunklearner Communicator in Getting Data In 11-08-2024 0 12	0	12
Sysmon events not getting indexed Hi,I am deploying sysmon all acrros our company but for some reason the sysmon events are not getting indexedOur depl... by corti77 Contributor in Getting Data In 11-08-2024 1 12	1	12
Why did ingestion slow way down after I added thousands of new forwarders and/or sources and sourcetypes? My Splunk environment was humming right along until I had a need to very quickly add several thousand new FWDs and a ... by davidpaper Contributor in Getting Data In 11-07-2024 3 3	3	3
Linux Onboarding -Private AWS VPC Few servers are hosting in private VPC which are not connected to organisation IT network how can we onboard those L... by splunkingsplk Explorer in Getting Data In 11-07-2024 0 1	0	1
TCP routing and change target index on secondary Splunk platform Hello,We have two clustered Splunk platforms.Several sources are sent to both platforms (directly to clustered indexe... by splunkreal Influencer in Getting Data In 11-07-2024 0 1	0	1
Trying to collect data through HEC with json event containing empty values Hello, I obtain a "Failed processing http input" when trying to collect the following json event with indexed fields... by davidlg Explorer in Getting Data In 11-07-2024 0 2	0	2
DB_Connect I have an index in which data is coming DB_connect , but it showing NO EVENTS as it is showing this error"Invalid dat... by Siddharthnegi Contributor in Getting Data In 11-07-2024 0 3	0	3
How to create reset in the dashboard Hi All I would like to add reset button in the dashboard however i am not able to see the option to add in dashboard ... by jaibalaraman Path Finder in Getting Data In 11-07-2024 0 2	0	2
Is there a specific license needed to support indexing on a heavy forwarder? Please advise as to whether a specific license is needed to support indexing on a heavy forwarder; Like an indexing l... by dharris_splunk Splunk Employee in Getting Data In 11-07-2024 0 3	0	3
SEDCMD not working in Splunk Cloud I have syslogs coming into Splunk that need some cleaning up - it's essentially JSON with a few extra characters here... by best-west Explorer in Getting Data In 11-06-2024 0 7	0	7
Cannot View Logs in Splunk after Integrating with Google Workspace This is regarding the integration between Splunk and Google Workspace.I have followed the documentation below to conf... by ShuKinTa Engager in Getting Data In 11-06-2024 0 2	0	2
What are best practices for logging to splunk? We have logs that are written to/var/log /var/log/audit We need to keep these for 365 days, and want to ensure that w... by shanemhartley New Member in Getting Data In 11-05-2024 0 1	0	1
Way to set up GUI setup for automatic install on multiple devices My office has deployed around 120 devices that they have now requested splunk be added to. We have been unsuccessful ... by mwgrant21 New Member in Getting Data In 11-05-2024 0 1	0	1
Field string incorrectly showing post onboarding Hi, F5 team is sending logs to our splunk syslog server as comma seperated values. Post onboarding we see some of fie... by splunklearner Communicator in Getting Data In 11-05-2024 0 2	0	2
Line Breaking Issue - text and Json Hello,Below is my log file and I want to break as two log events in splunk using props.conf(regex) 2024-07-31T01:38:0... by arunsoni Explorer in Getting Data In 11-04-2024 0 11	0	11