Getting Data In

Getting Data In
Community Activity
jcolon68
Is there a way to forward logs from Splunk to a 3rd Party collector by Index / SourceType?
by jcolon68 Explorer in Getting Data In 06-06-2019
0 2
0
2
arlombar
Hello, I am in the process of setting up a new TCP input to pull DNS/DHCP logs from a vendor product. This product ha...
by arlombar Explorer in Getting Data In 06-06-2019
0 6
0
6
JenWun
Hello, we are successfully logging events from Docker hosts via Splunk adapter (HEC) into splunk. Problems arise wh...
by JenWun New Member in Getting Data In 06-05-2019
0 2
0
2
chris
Hi I have an index that has its frozenTimePeriodInSecs set to 90 days. When inspect that index with the rest command...
by chris Motivator in Getting Data In 06-05-2019
0 7
0
7
bobmccoy
I have set up logging AWS cloudwatch to Splunk using the firehose method from this Blog: https://www.splunk.com/blog...
by bobmccoy Explorer in Getting Data In 06-05-2019
0 0
0
0
ram254481493
I am creating a sourcetype but my lines are not breaking properly here is my stanza : {"TimeStampString":"6/5/2019 7...
by ram254481493 Explorer in Getting Data In 06-05-2019
0 0
0
0
anton085
Hi, When I go to :8089/services/data/inputs/all I get a list of all the inputs Splunk is listening to. In each input...
by anton085 Path Finder in Getting Data In 06-05-2019
0 3
0
3
sahils
Please help us for how Splunk can be utilized to provide monitoring for Cisco ASA.
by sahils New Member in Getting Data In 06-05-2019
0 2
0
2
mightaswelby
Having an issue with a linebreak. Seems most events are breaking properly, but a small number are not. I think this ...
by mightaswelby Explorer in Getting Data In 06-05-2019
0 3
0
3
ddrillic
We would like to avoid having the granularity within severclass.conf and specify the hosts in inputs.conf. Can we ad...
by ddrillic Ultra Champion in Getting Data In 06-05-2019
0 0
0
0
afx
Hi, I have a totally weird situation. The field list on the left shows me the stuff I have defined. When I click on ...
by afx Contributor in Getting Data In 06-05-2019
0 2
0
2
sarit_s
Hello this is my event: Jun 19 12:31:44 : Info:copyconfig.cpp:319: copyConfig: copy configuration to /tmp/t5871.cf...
by sarit_s Communicator in Getting Data In 06-05-2019
0 2
0
2
paulalbert11
I'm trying to replicate other threads that show how to replace line breaks with delimiters. This search is not workin...
by paulalbert11 Explorer in Getting Data In 06-05-2019
0 6
0
6
divyamudundi
Hello Team, We are in the process of moving some of our applications from our Software as a Service (SaaS) environme...
by divyamudundi Path Finder in Getting Data In 06-04-2019
1 1
1
1
morethanyell
What is the industry practice for setting the home and cold sizes? If home + cold = maxTotalDataSizeMB, should we a....
by morethanyell Builder in Getting Data In 06-04-2019
0 4
0
4
kiranpatil1985
I have the following data in 2 different indexes that I want to merge based on the common email field. Index B is a ...
by kiranpatil1985 New Member in Getting Data In 06-04-2019
0 1
0
1
morethanyell
Hi, I'm at a dead end. I'm just playing around and wanting to index the JSON result of a cURL command. What do I do?...
by morethanyell Builder in Getting Data In 06-04-2019
0 3
0
3
panderla
New Cloud user Want a basic custom search app to be moved from On-Premise system to SplunkCloud.
by panderla Loves-to-Learn Lots in Getting Data In 06-04-2019
0 4
0
4
jip31
hello I would like to know how to use comparison sign in a input text filter?? thanks
by jip31 Motivator in Getting Data In 06-04-2019
0 3
0
3
mas
Hi, I am using DB Connect 3.1.1 to get data from a Microsoft SQL Server 2014 database. I am required to collect the ...
by mas Path Finder in Getting Data In 06-04-2019
3 7
3
7
williamcharlton
Below is an example of a log I want to ingest. I want to end up with 8 events. The timestamp for each event should b...
by williamcharlton Path Finder in Getting Data In 06-04-2019
0 2
0
2
damiko
Hello, dear Splunk Ninjas! I've an issue with Search Head, it is using too much RAM. At first I thought that was our ...
by damiko Communicator in Getting Data In 06-04-2019
0 11
0
11
yossig124
I use only Splunk Universal Forwarder on my clients with third party server. I recieve the message from Forwarder lin...
by yossig124 New Member in Getting Data In 06-04-2019
0 8
0
8
gerberm
How do I output to text (csv or json) per-minute aggregates continuously in real time? The resulting file will be scr...
by gerberm New Member in Getting Data In 06-04-2019
0 2
0
2
Jhand2016
We are a new Splunk Enterprise 6.4.1 installation and have ran into a snag with indexing our Domain Controller logs. ...
by Jhand2016 Explorer in Getting Data In 06-03-2019
1 3
1
3
Get Updates on the Splunk Community!

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...

Trusted Autonomy in the SOC: A Maturity Journey

AI is compressing attacker timelines and pushing SOC teams beyond human capacity thresholds. The next SOC ...

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...
Top Solution Authors