Getting Data In

Community Activity

Capturing Metrics over TCP using JSON Hi, We are trying to get metrics into Splunk using TCP, so far we have tried the following: inputs.conf[tcp://44444]c... by dewitp New Member in Getting Data In 10-08-2024 0 1	0	1
Splunk Connect 4 Syslog (SC4S) with HEC in a Clustered Environment Hello,I'm figuring out the best way to address the above situation. We do have a huge multisite cluster with 10 index... by avoelk Communicator in Getting Data In 10-08-2024 0 3	0	3
How to properly split fields from syslog events that were split to different sourcetypes? This is a followup question to the solution on this thread:https://community.splunk.com/t5/Getting-Data-In/create-mul... by StephenD1 Path Finder in Getting Data In 10-08-2024 0 3	0	3
create multiple sourcetypes from single syslog source Hi I'm looking to create events for syslog data from a wireless controller - and the syslog data also contains data f... by Esky73 Builder in Getting Data In 10-08-2024 0 6	0	6
Cisco Security Cloud Hi guys,Is there any documentation available out there to setup the Cisco Security Cloud app?Specific requirements, "... by FQzy Explorer in Getting Data In 10-07-2024 1 6	1	6
Time based retention time, without a thawed path I'm trying to configure the indexes.conf in such a way that its data retention is exactly 180 days and then does NOT ... by avoelk Communicator in Getting Data In 10-07-2024 0 5	0	5
Why does my Splunk universal forwarder crashe : Crashing thread: parsing I have splunk universal forwarder version-6.5.2 after few days it crashes and gives error as- Received fatal signal 6... by ips_mandar Builder in Getting Data In 10-04-2024 0 7	0	7
UNC Path to Network Print Server Trying to monitor a separate print server folder outside where Splunk is hosted with print logs that has a UNC path. ... by ramuzzini Path Finder in Getting Data In 10-04-2024 0 1	0	1
ingest json logs - no extractions First time ingesting JSON logs, so need assistance on figuring out why my JSON log ingestion is not auto extracting.E... by Darthsplunker Path Finder in Getting Data In 10-03-2024 0 1	0	1
Enable MySQL Community 8.0.37 audit logging in a Windows environment Our MySQL server was upgraded from 5.7 to 8.0.37, and the MariaDB plugin no longer supports exporting audit log files... by Alan_Chan Explorer in Getting Data In 10-02-2024 0 1	0	1
Splunk UF Windows Security Event logs just seem to randomly stop sending Experiencing an issue on a few random servers, some Domain Controllers and some Member Servers. Windows Security Even... by PeterBoard Path Finder in Getting Data In 10-02-2024 0 7	0	7
SSL module is not available? Hi, When trying to call some rest API's in a custom script using the request package, if the URL is https Splunk thro... by dwoodfordgrid Engager in Getting Data In 10-01-2024 1 6	1	6
How to reindex data from a forwarder I have a Storm project and I want to clean all and reindex only the last days, and some specific files. I have Splunk... by mataharry Communicator in Getting Data In 10-01-2024 12 16	12	16
Parsing Multi Line Timestamp I have to parse the timestamp of JSON logs and I would like to include subsecond precision. My JSON-Events start like... by jroedel Path Finder in Getting Data In 10-01-2024 0 7	0	7
How do I integrate Zabbix with Splunk? I need to integrate zabbix v. 3.4 and Splunk v. 7.2.6 somehow, with Splunk receiving data from Zabbix, I have each on... by sachaz Explorer in Getting Data In 10-01-2024 2 4	2	4
FIPS mode Support for Splunk Add-on for Salesforce on IDM Could the Splunk Add-on for Salesforce team clarify whether FIPS mode is supported?Per https://docs.splunk.com/Docume... by timothylindt New Member in Getting Data In 09-30-2024 0 2	0	2
Splunk Azure Storage Account not connecting Hello,I'm having troubles connection a Splunk instance with an Azure Storage Account. After the account was set i hav... by LinghGroove Explorer in Getting Data In 09-30-2024 0 1	0	1
Splunk DB connect indexing only 10k events per hour Hello,Splunk db_connect is indexing only 10k events per hour at a time no matter what setting I configure in inputs. ... by mayurr98 Super Champion in Getting Data In 09-29-2024 0 1	0	1
How to split large combi JSON array into individual events during index time Hi All,I have this compressed (reduced version of large structure) which is a combination of basic text and JSON: 202... by BTrust Path Finder in Getting Data In 09-28-2024 0 15	0	15
Cannot see the Universal forwarder From Splunk Enterprise Hi,I have setup 2 VMs in Virtual box, installed the Splunk Enterprise in Windows server 2022, and installed the unive... by mmatin Explorer in Getting Data In 09-28-2024 0 6	0	6
How to calculate the difference in minutes/seconds between two timestamps in a human readable format? Submit Date / Creation Date Time Stamp Incident Response Date Time 09/14/2016 01:14 AM 09/14/2016... by rijinc Path Finder in Getting Data In 09-28-2024 0 8	0	8
inputs.conf - configure "source" Hi all,i have a monitor stanza in inputs.conf that monitor our organization proxy,the logs are sent by syslog-ngi ha... by Gil Explorer in Getting Data In 09-28-2024 0 8	0	8
How to edit my inputs.conf to blacklist a directory? Apologies, but I'm not groking this. I've read dozens of "answers", I've read several docs on the topic. But, I can't... by Michael Contributor in Getting Data In 09-28-2024 0 13	0	13
Is there a way to check if Splunk is re-indexing certain files? Hi,We use Splunk Forwarder to monitor application data. There are multiple folders on a given server, each with same ... by att35 Builder in Getting Data In 09-28-2024 0 2	0	2
Run PowerShell Core scripts on Universal Forwarder Is there a native way to run scripts in pwsh.exe managed environment?It's not mentioned in docs so I believe not: htt... by TomaszOledzki Engager in Getting Data In 09-27-2024 0 1	0	1