Getting Data In

Community Activity

Time based retention time, without a thawed path I'm trying to configure the indexes.conf in such a way that its data retention is exactly 180 days and then does NOT ... by avoelk Communicator in Getting Data In 10-07-2024 0 5	0	5
Why does my Splunk universal forwarder crashe : Crashing thread: parsing I have splunk universal forwarder version-6.5.2 after few days it crashes and gives error as- Received fatal signal 6... by ips_mandar Builder in Getting Data In 10-04-2024 0 7	0	7
UNC Path to Network Print Server Trying to monitor a separate print server folder outside where Splunk is hosted with print logs that has a UNC path. ... by ramuzzini Path Finder in Getting Data In 10-04-2024 0 1	0	1
ingest json logs - no extractions First time ingesting JSON logs, so need assistance on figuring out why my JSON log ingestion is not auto extracting.E... by Darthsplunker Path Finder in Getting Data In 10-03-2024 0 1	0	1
Enable MySQL Community 8.0.37 audit logging in a Windows environment Our MySQL server was upgraded from 5.7 to 8.0.37, and the MariaDB plugin no longer supports exporting audit log files... by Alan_Chan Explorer in Getting Data In 10-02-2024 0 1	0	1
Splunk UF Windows Security Event logs just seem to randomly stop sending Experiencing an issue on a few random servers, some Domain Controllers and some Member Servers. Windows Security Even... by PeterBoard Path Finder in Getting Data In 10-02-2024 0 7	0	7
SSL module is not available? Hi, When trying to call some rest API's in a custom script using the request package, if the URL is https Splunk thro... by dwoodfordgrid Engager in Getting Data In 10-01-2024 1 6	1	6
How to reindex data from a forwarder I have a Storm project and I want to clean all and reindex only the last days, and some specific files. I have Splunk... by mataharry Communicator in Getting Data In 10-01-2024 12 16	12	16
Parsing Multi Line Timestamp I have to parse the timestamp of JSON logs and I would like to include subsecond precision. My JSON-Events start like... by jroedel Path Finder in Getting Data In 10-01-2024 0 7	0	7
How do I integrate Zabbix with Splunk? I need to integrate zabbix v. 3.4 and Splunk v. 7.2.6 somehow, with Splunk receiving data from Zabbix, I have each on... by sachaz Explorer in Getting Data In 10-01-2024 2 4	2	4
FIPS mode Support for Splunk Add-on for Salesforce on IDM Could the Splunk Add-on for Salesforce team clarify whether FIPS mode is supported?Per https://docs.splunk.com/Docume... by timothylindt New Member in Getting Data In 09-30-2024 0 2	0	2
Splunk Azure Storage Account not connecting Hello,I'm having troubles connection a Splunk instance with an Azure Storage Account. After the account was set i hav... by LinghGroove Explorer in Getting Data In 09-30-2024 0 1	0	1
Splunk DB connect indexing only 10k events per hour Hello,Splunk db_connect is indexing only 10k events per hour at a time no matter what setting I configure in inputs. ... by mayurr98 Super Champion in Getting Data In 09-29-2024 0 1	0	1
How to split large combi JSON array into individual events during index time Hi All,I have this compressed (reduced version of large structure) which is a combination of basic text and JSON: 202... by BTrust Path Finder in Getting Data In 09-28-2024 0 15	0	15
Cannot see the Universal forwarder From Splunk Enterprise Hi,I have setup 2 VMs in Virtual box, installed the Splunk Enterprise in Windows server 2022, and installed the unive... by mmatin Explorer in Getting Data In 09-28-2024 0 6	0	6
How to calculate the difference in minutes/seconds between two timestamps in a human readable format? Submit Date / Creation Date Time Stamp Incident Response Date Time 09/14/2016 01:14 AM 09/14/2016... by rijinc Path Finder in Getting Data In 09-28-2024 0 8	0	8
inputs.conf - configure "source" Hi all,i have a monitor stanza in inputs.conf that monitor our organization proxy,the logs are sent by syslog-ngi ha... by Gil Explorer in Getting Data In 09-28-2024 0 8	0	8
How to edit my inputs.conf to blacklist a directory? Apologies, but I'm not groking this. I've read dozens of "answers", I've read several docs on the topic. But, I can't... by Michael Contributor in Getting Data In 09-28-2024 0 13	0	13
Is there a way to check if Splunk is re-indexing certain files? Hi,We use Splunk Forwarder to monitor application data. There are multiple folders on a given server, each with same ... by att35 Builder in Getting Data In 09-28-2024 0 2	0	2
Run PowerShell Core scripts on Universal Forwarder Is there a native way to run scripts in pwsh.exe managed environment?It's not mentioned in docs so I believe not: htt... by TomaszOledzki Engager in Getting Data In 09-27-2024 0 1	0	1
allowedHosts option in inputs.conf I'm looking for a way to specify which host a [monitor] stanza applies to within the inputs.conf file. If the stanza... by davidstuffle Path Finder in Getting Data In 09-27-2024 0 12	0	12
Minimum permissions to facilitate log ingestion Hi all,I was wanting to get an understanding on what the minimum permissions available to enable the log flow between... by MohammedKhanIUK New Member in Getting Data In 09-26-2024 0 3	0	3
Impact analysis of upgrade of Splunk UF agent on Cloud instance Hi Team,Currently, we are using Splunk UF agents which is installed on all infra servers and which receives configura... by Gayatri Explorer in Getting Data In 09-26-2024 0 4	0	4
How to collect audit logs from MS SQL and MySQL DBs? by islamjy2011 New Member in Getting Data In 09-26-2024 0 1	0	1
Syslog Forwarding Filtering Hello,Imagine you have hundreds of Windows Universal Forwarders each sending three sources to your "Heavy Forwarders"... by tsocyberoperati Loves-to-Learn Lots in Getting Data In 09-25-2024 0 6	0	6