Getting Data In

Community Activity

Langfuse integration with Splunk Hi Team,We are exploring ways to integrate Langfuse with Splunk to ingest traces and agent‑level telemetry for monito... by Manish_Sharma Engager in Getting Data In 03-02-2026 0 0	0	0
Download older version of Splunk Universal Forwarder Hi All,Some months ago, I remember seeing Splunk Universal Forwarder download page for older versions like 6.x , 7.x ... by Poojitha Communicator in Getting Data In 02-27-2026 0 2	0	2
Splunk Stream /captureipaddresses endpoint returns 404, while /ping works – Setup cannot detect forwarder Environment: Splunk Enterprise single instance on WindowsSplunk App for Stream (v8.1.5) and Splunk Add-on for Stream ... by snick New Member in Getting Data In 02-26-2026 0 0	0	0
Need help with TCP routing of events from Universal Forwarder Hi all,I'm using Splunk Enterprise 9.4.x with Windows Universal Forwarders.I'm trying to route specific sources and s... by joshuapetitt Path Finder in Getting Data In 02-26-2026 0 2	0	2
Which apps need the restartSplunkd to be true? We recently realized that the restartSplunkd attribute is more effective when defined at the individual app level rat... by spl_aficionado Path Finder in Getting Data In 02-26-2026 0 2	0	2
Splunk Add-on for Salesforce Streaming API Connection Login Flow We have a secure instance of Salesforce that mandates SSO and Oauth2. We are trying to set up the Splunk Add-on for S... by Aviation New Member in Getting Data In 02-24-2026 0 0	0	0
Events not returned in sub-second order I recently started pulling Tenable data in through the Tenable Add-on for Splunk, and when I search the data in Searc... by Jtorge Explorer in Getting Data In 02-24-2026 0 1	0	1
Avoiding double ingestion I have a RHEL admin who is building two syslog servers to ingest data from one RHEL node redundantly. These two syslo... by Jtorge Explorer in Getting Data In 02-23-2026 0 5	0	5
Server Class Groups to install this app on What Splunk servers should the installation be on? What components of the app will go into - HF- Cluster Master- Sear... by anmolxmr Explorer in Getting Data In 02-23-2026 0 1	0	1
Splunk Universal Forwarder Okay, I just want to make sure I understand everything correctly.I'm currently working on a Splunk environment, it cu... by JJ_Splunk New Member in Getting Data In 02-22-2026 0 1	0	1
Selective Indexing and Parsing in Splunk SIEM – Storing Full Logs but Parsing Only Compliance Fields Hi Team,I’m looking for guidance on designing a Splunk SIEM ingestion strategy for the following scenario:We receive ... by amimulahasun Explorer in Getting Data In 02-22-2026 0 6	0	6
UF : Prevent ingestion in a wrong index I've an infrastructure where everyone are administrator and therefore can change the universal forwarder configuratio... by Sagittis Explorer in Getting Data In 02-21-2026 0 6	0	6
How do I FULLY uninstall Splunk Universal Forwarder I'm running Splunk Universal Forwarder with a Splunk Enterprise deployment. On a new install, all information is popu... by cutright_jm New Member in Getting Data In 02-20-2026 0 7	0	7
How do i index a single file locally on the HF HelloCurrently all data forwarded to our on-prem HF goes to Splunk Cloud, I now have a single file that I want to ind... by tkwaller1 Path Finder in Getting Data In 02-19-2026 0 4	0	4
splunk data ingestion issue i am uploading the data in the text format and that data contains logs but when i successfully upload the data of par... by harman Explorer in Getting Data In 02-18-2026 0 5	0	5
Amount of data leaving Splunk Heavy Forwarder I'm trying to measure the amount of data leaving a heavy forwarder (called HVYFWD01).This is in preparation to moving... by eddieddieddie Path Finder in Getting Data In 02-17-2026 0 1	0	1
help with host override I'm trying to rewrite the host field on events that are coming into a HEC on a HF. It's populating the hostname of t... by ilhwan Path Finder in Getting Data In 02-17-2026 0 8	0	8
Universal Forwarder My network has Splunk Enterprise 10.0.2, and it is air-gapped.I want to run a Linux and Windows enterprise server sid... by sswigart Explorer in Getting Data In 02-16-2026 0 4	0	4
What is the correct props.conf to ingest csv files? @richgalloway explained clearly in the post, that INDEXED_EXTRACTIONS=CSV makes all the fields indexed. What would be... by spl_aficionado Path Finder in Getting Data In 02-10-2026 0 1	0	1
Does INDEXED_EXTRACTIONS imply index fields for all the fields? I just set INDEXED_EXTRACTIONS = CSV for a large data ingestion sourcetype, and validating with tstats, and it seems ... by spl_aficionado Path Finder in Getting Data In 02-09-2026 0 2	0	2
Oracle Cloud (OCI) WAF Logs Ingestion Hi,Does anyone know how to ingest the WAF logs generated by the Oracle Cloud Web Application Firewall service? The lo... by adnankhan5133 Communicator in Getting Data In 02-09-2026 0 2	0	2
Splunk addon for iis: why have configs other than ms:iis:auto been deprecated? I see from the latest release notes that the recommended sourcetype is ms:iis:auto and the others have been deprecate... by cmeo-bcit Explorer in Getting Data In 02-08-2026 0 4	0	4
Need assistance on Log forwarding from UF I am trying to forward win event security logs from server using UF to our Heavy forwarder. UF has all the required ... by Navanitha Path Finder in Getting Data In 02-06-2026 0 4	0	4
Syslog ng cut the logs of Fortigate? I have a Fortigate firewall that was configured to send UDP logs, lately, I have configured it to send TCP logs inste... by muradgh Path Finder in Getting Data In 02-06-2026 1 20	1	20
Splunk add-on for Amazon Web Services - "Conf file(s) passwords.conf changed, exiting" I have the Splunk add-on for Amazon Web Services v 8.0.0 installed on a Heavy Forwarder and we have several inputs wo... by StuartMacL Path Finder in Getting Data In 02-06-2026 0 1	0	1