Getting Data In

Community Activity

Splunk is not Indexing Scripted Input Data Splunk is not indexing the data through the Scripted input. The input is working for the on-premise servers, the da... by rsantoso_splunk Splunk Employee in Getting Data In 06-16-2019 0 1	0	1
ignore the raw event using heavy forworder Hi ALL, could anyone help use to parsing/trimming of the raw event using heavy forworders? Plzz find the attached s... by nerelluk New Member in Getting Data In 06-16-2019 0 3	0	3
Time format is not working as per props.conf file I want to ingest data at current time ,for that we are using props.conf file ,the configuration for which is props.... by ajitshukla61116 Path Finder in Getting Data In 06-16-2019 0 3	0	3
Powershell App Script Handling Error Hi Has anyone created a splunk app that has an input generated by a powershell script? I have a script that runs th... by dmcintosh1972 Explorer in Getting Data In 06-16-2019 0 1	0	1
How to extract a specific key and its values in a table? Hello I'm new to splunk search commands, My event is like ObjectID: 001 Properties: [ [ -] {[-] Name: targetName V... by nithyashreea New Member in Getting Data In 06-16-2019 0 8	0	8
Files are not indexing automatically when selected Monitor Files & Directories I have configured to monitor a directory which has JSON file under it. But after submitting everything when I searche... by vikrantkumar199 New Member in Getting Data In 06-15-2019 0 1	0	1
Search head cluster & Indexer cluster error :Unknown error for peer.Search Results might be incomplete & Slave is unable to handle request at this time Hi folks, I'm trying to troubleshoot couple of production issues, one related to SHC and other related Indexer cluste... by premforsplunk Explorer in Getting Data In 06-14-2019 0 1	0	1
How can I change the default hostname in Splunk? I don't like the default hostname that shows up in Splunk. I would like to change it to the FQDN. How can I do this q... by DerekB Splunk Employee in Getting Data In 06-14-2019 6 2	6	2
Routing to an dynamic index based on JSON field I have JSON data that I am ingesting. I would like to route the event to an index based on one of the JSON fields. ... by trenin Explorer in Getting Data In 06-14-2019 0 2	0	2
props.conf Hi All, can anyone help us to figure out magic six for the below sample log? SHOULD_LINEMERGE= LINE_BREAKER= MAX_TI... by EHariharan Explorer in Getting Data In 06-14-2019 0 6	0	6
Can forwarded data be customized? Being inspired by this sample I've developed my own modular input which loads data, parse it and after imports it to... by dreadangel Path Finder in Getting Data In 06-13-2019 0 2	0	2
How to move a summary index from a search head to the indexers? Hi I don't have a lot of experience with summary indexes, but the previous admin created some schedule reports and s... by Glasses Builder in Getting Data In 06-13-2019 0 2	0	2
Line Breaking Not Working for some IIS logs All, My IIS logs keep getting merged together into one event and maybe i am just exhausted, but I can't seem to fig... by daniel333 Builder in Getting Data In 06-13-2019 0 2	0	2
Change timezone of timestamps from UTC to AEDT Hello, I am having hard time in understanding timezone assignment to the log event. I went through all the required ... by hemendralodhi Contributor in Getting Data In 06-13-2019 0 5	0	5
How to blacklist data containing specific words I have found that there are lots of syslog contains "Log statistics", which is log statistic data of syslog. Splunk ... by bli_scs New Member in Getting Data In 06-13-2019 0 1	0	1
How to trigger script with arguments from Splunk search? I was able to make splunk send alert to my abc_pythonscript correctly after configuring commands.conf \| makeresults... by koshyk Super Champion in Getting Data In 06-13-2019 1 8	1	8
Virtual Hard disk for Indexer Hello Splunkers I have an Indexer Cluster setup on Azure(Splunk Enterprise) Platform. My indexer VM instance has 100... by aruncp333 Explorer in Getting Data In 06-12-2019 0 1	0	1
How does WinNetMon determine RemoteHostName i'm trying to figure out how/when/where Splunk resolves the RemoteHostName field in WinNetMon. I assume this is done... by templets Path Finder in Getting Data In 06-12-2019 0 0	0	0
Is anyone using splunk to monitor NIFI logs in AWS? I have a few nifi nodes (on EC2 instances) running in AWS. I use nifi to process data into s3. I am looking for a wa... by Log_wrangler Builder in Getting Data In 06-12-2019 0 2	0	2
How to index same source to multiple indexes Hi there. I have a great problem with Splunk 7.x.x. What I need: indexing the SAME SOURCE to 2 or more indexes... NO ... by verbal_666 Builder in Getting Data In 06-12-2019 0 8	0	8
How can I keep an event AND get a metric at index time? All, I see a few examples on convert an event received into a metric. Is there a way to say keep an apache log and ... by daniel333 Builder in Getting Data In 06-12-2019 0 2	0	2
hot/warm buckets hi all, I have seperate drive for my hot/warm and cold data. The hot/warm drive is near capacity. Looking to find a... by pbrinkman Path Finder in Getting Data In 06-12-2019 0 2	0	2
Can you migrate Indexes to a new Splunk environment and give them a new name? Hi I'm about to migrate data from an old stand alone indexer, to a new one. Is it possible to migrate the data to i... by Stokers_23 Explorer in Getting Data In 06-12-2019 0 1	0	1
Create alert to show possible shared passwords Need to create a query to be able to pull data and show when someone has either swiped in from key card reader, logge... by dmws New Member in Getting Data In 06-12-2019 0 3	0	3
Docker container Splunk unable to assign or use privileged ports under 1024, ignore NET_BIND_SERVICE ? Splunk 7.3.0 docker -v Docker version 18.09.6, build 481bc77156 cat /etc/centos-release CentOS Linux release 7.6.181... by deodion Path Finder in Getting Data In 06-11-2019 1 0	1	0