Getting Data In

Getting Data In
Community Activity
Erendouille
Hello !I'm using Splunk_SA_CIM with ESS and I'm currently studying most of the ESCU correlation search for my own pur...
by Erendouille Engager in Getting Data In 10-17-2024
0 4
0
4
gmoors
I'm trying to let Splunk Enterprise log some creation of a user on the same system as where Splunk is installed.My Sp...
by gmoors Engager in Getting Data In 10-16-2024
0 5
0
5
Laya123
Hi, I have scheduled a report to get an email with an attachment of the results as CSV for the 1st of every month. ...
by Laya123 Communicator in Getting Data In 10-16-2024
1 6
1
6
jorge_1800
Hello there, our shop uses proofpoint vpn for our remote users to access on-prem resources. I've been looking into sp...
by jorge_1800 Engager in Getting Data In 10-15-2024
0 4
0
4
Bracha
I'm trying to calculate the minute difference between two timesand get an empty field .........base search here.........
by Bracha Path Finder in Getting Data In 10-14-2024
0 3
0
3
egid_la
Hi everyone, I'm currently running Splunk 6.5.3 I want list of all users who has access to splunk. |rest /servic...
by egid_la Explorer in Getting Data In 10-14-2024
1 6
1
6
anandhalagaras1
Hi Team,We are planning to host the Deployment Master server and two Splunk Heavy Forwarder servers in our on-prem Nu...
by anandhalagaras1 Contributor in Getting Data In 10-14-2024
0 4
0
4
vin_ven27
We install Universal forwarder in Windows Server for us to pull data from [WinEventLog://Microsoft-Windows-TaskSchedu...
by vin_ven27 Explorer in Getting Data In 10-14-2024
0 11
0
11
mk_goog_3898
Trying to use syslog-ng for latest Splunk enterprise.  I am getting error " Failed to acquire /run/systemd/journal/sy...
by mk_goog_3898 New Member in Getting Data In 10-11-2024
0 1
0
1
timtekk
Hello, we are on Splunk 9.3 on prem. I am unable to remove a server from the Splunk forwarder management list, after ...
by timtekk Explorer in Getting Data In 10-11-2024
0 6
0
6
dgill
I'm using the splunk-otel-collector, and attempting to get multi-line java exceptions into a standardly formatted eve...
by dgill Loves-to-Learn in Getting Data In 10-11-2024
0 1
0
1
jatkb
We are looking to deploy Edge Processors (EP) in a high availability configuration - with 2 EP systems per site and m...
by jatkb Engager in Getting Data In 10-11-2024
0 2
0
2
kevink707
Does Splunk for Cisco Identity Services (ISE) support data containing IPv6 addresses? 
by kevink707 New Member in Getting Data In 10-10-2024
0 0
0
0
FPERVIL
I would like to update my universal forwarders to send data to 2 separate endpoints for 2 separate splunk environment...
by FPERVIL Explorer in Getting Data In 10-10-2024
0 1
0
1
mayvisible
Hi Everyone,I am not Splunk engineer but I have task to do. sc4s.service is failed. Can't get the logs. It was workin...
by mayvisible Loves-to-Learn Lots in Getting Data In 10-09-2024
0 7
0
7
ramuzzini
Need some assistance with creating a query where I am trying to capture the parent folder and the 1st child folder re...
by ramuzzini Path Finder in Getting Data In 10-09-2024
0 4
0
4
Glom
We have some events coming in to Splunk that show as following: time="09/10/2024 11:41:15" URL="[Redacted String]" Na...
by Glom New Member in Getting Data In 10-09-2024
0 3
0
3
kristensens
Hi, I've an eventhub that receives data from multiple application, with different number and values of columns. The e...
by kristensens Explorer in Getting Data In 10-09-2024
0 2
0
2
galaxis
Hello!  Wanted to ask if anyone has experience with receiving SNMPv2 trap alerts in Splunk 8.2.5 (Win 2019)?  Backgro...
by galaxis Observer in Getting Data In 10-09-2024
0 0
0
0
ray88
I am using Splunk universal forwarder 8.1.1 on a linux server configured as a log aggregator.  I have 7 well defined ...
by ray88 New Member in Getting Data In 10-09-2024
0 2
0
2
dewitp
Hi, We are trying to get metrics into Splunk using TCP, so far we have tried the following: inputs.conf[tcp://44444]c...
by dewitp New Member in Getting Data In 10-08-2024
0 1
0
1
avoelk
Hello,I'm figuring out the best way to address the above situation. We do have a huge multisite cluster with 10 index...
by avoelk Communicator in Getting Data In 10-08-2024
0 3
0
3
StephenD1
This is a followup question to the solution on this thread:https://community.splunk.com/t5/Getting-Data-In/create-mul...
by StephenD1 Path Finder in Getting Data In 10-08-2024
0 3
0
3
Esky73
Hi I'm looking to create events for syslog data from a wireless controller - and the syslog data also contains data f...
by Esky73 Builder in Getting Data In 10-08-2024
0 6
0
6
FQzy
Hi guys,Is there any documentation available out there to setup the Cisco Security Cloud app?Specific requirements, "...
by FQzy Explorer in Getting Data In 10-07-2024
1 6
1
6
Get Updates on the Splunk Community!

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...

Enriching Signals with the OTel Lookup Processor

Introduction Raw telemetry is often incomplete. A log line might record an IP address, but what you really ...

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...
Top Solution Authors