Getting Data In

Community Activity

Moving files and folders inputs to heavy forwarder Hi Splunkers, we use approach to collect logs on syslog and than point Splunk on logs with Files & Directories input... by evelenke Contributor in Getting Data In 02-27-2019 1 4	1	4
Break up multi line event I'm trying to query for which ports are open on IP ranges, although the data has multiline information. Below is an e... by JPaule Explorer in Getting Data In 02-27-2019 0 8	0	8
Why is props.conf in my deployment-app not getting picked up? I have a standalone Splunk environment - I have universal forwarders and an indexer/Deployment server which acts as t... by mudragada Path Finder in Getting Data In 02-27-2019 0 9	0	9
How do I monitor the same path in one app but with different sourcetypes? Hi, This is my very first question here. I was digging through this site, but did not find an answer to my issue. An... by przemysaw Explorer in Getting Data In 02-27-2019 0 1	0	1
Cannot get custom sourcetype to do line breaks correctly We have Splunk Enterprise with SH, Clustered IX (2), HF and many UFs. I have created an app in the deployment apps f... by bobryant New Member in Getting Data In 02-27-2019 0 1	0	1
Is there a way to monitor the size of the files uploaded in Splunk? Hi all, Is there a way to monitor the size of log files that i upload on Splunk ? by clementros Path Finder in Getting Data In 02-27-2019 0 3	0	3
How come I'm unable to extract multiline events with the multikv command? Hi, I am trying to extract events from multiline event using multikv. Could someone please help me in configuring th... by carao2020 New Member in Getting Data In 02-27-2019 0 5	0	5
avoid duplicate file ingestion in splunk how to remove duplicate files from ingesting in splunk? i am monitoring a folder in which there is a file names abcd... by test4u Path Finder in Getting Data In 02-27-2019 0 5	0	5
Kendo grid filters in splunk dashboards Hey, We are using in our Splunk reports the kendo grid that has filtering options. When we change the filters the tab... by sofiadavidov New Member in Getting Data In 02-26-2019 0 0	0	0
Can you help me migrate Splunk from Windows to linux? I have Splunk working perfectly on a Windows machine. I need to now set up Splunk on a Linux machine. What are the ... by test4u Path Finder in Getting Data In 02-26-2019 0 1	0	1
Switch my splunk platform from windows to linux Hello everyone, I got already-running splunk with windows 2003 R2 Ent 32bit, I really want to know that is there an... by chrislee123 Engager in Getting Data In 02-26-2019 1 3	1	3
Is [any://] valid in a networking input? Hi, In an inputs.conf, is [any://1111] (for example) valid in a network input to use port 1111 for both TCP and UDP... by russell120 Communicator in Getting Data In 02-26-2019 0 1	0	1
Can you help me with a problem extracting XML? I've scoured Google and Answers, but my XML looks a little different than most I've seen so far: <Doc_OutPut XML_Ve... by manderson7 Contributor in Getting Data In 02-26-2019 0 4	0	4
Can I have a forwarder and indexer on the same machine just for experiment? Hi Guys, I am new to Splunk and I have play around the Splunk Enterprise for a few days. I managed to add data from ... by normangoh Explorer in Getting Data In 02-26-2019 0 4	0	4
How do you ensure a deployment client's .conf files are running with new changes? Hi, If I use push an update (.conf files) to deployment clients using my deployment server, how do I ensure those c... by russell120 Communicator in Getting Data In 02-26-2019 0 1	0	1
Adding a Unix indexer to support apps Again, new to Splunk. I currently have a single instance of Splunkenterprise installed on a Win12 R2 server. We would... by noy72 New Member in Getting Data In 02-26-2019 0 4	0	4
splunk-kinesis-stream-processor Lambda timeouts Hello, We're trying to use the Splunk provided Lambda application splunk-kinesis-stream-processor (from Serverless A... by iamkuba New Member in Getting Data In 02-26-2019 0 0	0	0
How do you filter out an event based on an account name? Hello, I am trying to exclude specific event logs from a Windows system being forwarded and indexed to Splunk. What... by alexandrosd New Member in Getting Data In 02-26-2019 0 3	0	3
Splunk DB connect: How does it work when storing/indexing data? Hello community, First of all, thank you for reading this question. I am being asked to monitor a new data source (S... by jesusgalloEMC Explorer in Getting Data In 02-26-2019 0 2	0	2
Why aren't my apps props.conf not being exported when using export = system? My props.conf values are not being picked up by the Splunk search app. I currently have the following stanza set in ... by inmanx09 New Member in Getting Data In 02-26-2019 0 1	0	1
HF logs is missing from _internal index I have this Heavy Forwarder apparently not sending its own _internal logs $SPLUNK_HOME/var/log/splunk/*.log to the i... by tcmarquesi Explorer in Getting Data In 02-26-2019 0 3	0	3
Filter events for specific keywords Hi, I have some set of events that has keywords like "inbound message" and "outbound message". the events looks some... by keishamtcs Explorer in Getting Data In 02-26-2019 0 15	0	15
moving from indexed time _json to search time We are using a lot of indexed time _json sourcetypes on our heavy forwarder for file inputs and HTTP event collector.... by Skins Path Finder in Getting Data In 02-26-2019 0 3	0	3
Splunk occasionally not capturing all logs Hey all, I'm running into some odd behavior. I currently have splunkforwarder set up on a container and it should be ... by rileykohl21 New Member in Getting Data In 02-26-2019 0 1	0	1
how can i ignore the last line from the csv file while indexing from the universal forwarder ?? how to tell my universal forwarder to ignore the last line from the CSV during parsing by Nadhiyaa Path Finder in Getting Data In 02-26-2019 0 1	0	1