Getting Data In

Community Activity

How do I leverage existing production data into our Dev environment? Scenario: We are doing a POC using Splunk ITSI tool. To achieve this, I built a new basic splunk Dev environment o... by damonmanni Path Finder in Getting Data In 02-15-2019 0 2	0	2
Start sending events in JSON format with pre existing raw events Hi, We are using Splunk Enterprise v 6.6.3. All our indexed events are raw events (logs) and we are planning to use ... by abdalhadi_altin New Member in Getting Data In 02-15-2019 0 2	0	2
Unable to parse CSV header in Splunk Web Hi, I am trying to load this CSV file: time,name,ActiveUsers,CaptureTimeDelta,CurrentValue,DeltaTimeAuditLog,Kurtos... by brutecat Path Finder in Getting Data In 02-15-2019 0 3	0	3
What's the Splunk-wmi.path script that points to splunk-wmi.exe? Is this custom? I'm trying to account for a number of Splunk configurations on a domain controller and I was trying to figure out wha... by heats Explorer in Getting Data In 02-14-2019 1 1	1	1
SELECTED FIELDS How to add fields to "selected fields" from the event. Some fields, such as name and sc_pl, are missing in the select... by fridays Explorer in Getting Data In 02-14-2019 0 10	0	10
How can I add an previous date count information column? I'd like to see the previous date count together with the current date count on one line. Is there a way? The presen... by hoya New Member in Getting Data In 02-14-2019 0 1	0	1
How do I get the IP addresses for my Indexers in Splunk Cloud? I went to provide my Security team the FQDN's of all the Indexers from the outputs.conf file provided by my Splunk Cl... by pdaigle_splunk Splunk Employee in Getting Data In 02-14-2019 0 1	0	1
Map ZipCodes without lat long My splunk event data has a mv list of zip codes that I'd like to put on a map but it looks like theres nothing out of... by tb5821 Communicator in Getting Data In 02-14-2019 0 7	0	7
Set up universal forwarder on Cisco FTD I am running Splunk Enterprise for Windows 7.1.3 and am trying to index Cisco FTD logs. I understand that the eStrea... by noy72 New Member in Getting Data In 02-14-2019 0 0	0	0
How do you check missing values from an input list and set an alert when values are missing? I have a scenario wherein each heavy forwarder has syslog listeners running. I need an alert or something in the dash... by RishiMandal Explorer in Getting Data In 02-14-2019 0 1	0	1
How can I configure the universal forwarder in Docker? Hi guys, How can I configure the universal forwarder in Docker? I create the image and container, but in the contai... by sabche New Member in Getting Data In 02-14-2019 0 1	0	1
EventCode 4725 and 4726 not visible on search results Hello, We have Splunk Add-on for Microsoft Windows (Splunk_TA_windows) deployed in our environment. There are 2 lo... by krishscalar New Member in Getting Data In 02-13-2019 0 1	0	1
How do you use a CLONE_SOURCETYPE to parse a sourcetype? Hi all, I am trying to set up WindowsEventLog to send all events with EventCode=4648 to one index, wineventlog_4648,... by gbeatty Path Finder in Getting Data In 02-13-2019 0 5	0	5
how to monitor windows path Below is the path I am trying to monitor C:\Program Files (x86)\Okta\Okta RADIUS Agent\current\logs\okta_radius and I... by vrmandadi Builder in Getting Data In 02-13-2019 0 3	0	3
Referencing global settings inside SimpleXML? Hi, I am looking for a way to access one of the global settings parameters directly from the simplexml and to be ren... by mlstomasevic New Member in Getting Data In 02-13-2019 0 8	0	8
How do you pull out the latest entry "only" for the last numbers entered? I have one file that is pulled in by a universal forwarder setup. This file is constantly changing on the system fo... by bzsplunk54 New Member in Getting Data In 02-13-2019 0 2	0	2
Retrieving Summary Index Data Hi I am trying to retrieve data from summary index and it is taking 300secs to retrieve 140000 events from 4 search... by praveenvemuri Explorer in Getting Data In 02-13-2019 0 3	0	3
IBM TIM and TAM logging into Splunk Hi folks, I've searched the web but couldn't find much info about it. Is it possible to send TIM/TAM logs to splunk, ... by ADRIANODL Explorer in Getting Data In 02-13-2019 0 0	0	0
Cannot view users with "can_delete" role If I (as a user with admin role) assign the "can_delete" role to another admin role user, I can no longer see that us... by hunderliggur Path Finder in Getting Data In 02-13-2019 3 7	3	7
KiwiSyslog with Splunk I have a syslog server and all the syslogs are currently going to KiwiSyslog. I have the Splunk Enterprise addition a... by sherrysafdar Explorer in Getting Data In 02-13-2019 0 0	0	0
SEDCMD to strip HTTP headers from raw TCP input (JSON submitted from HTTP POST) Trying to strip the header info out of the event below, leaving only the JSON. I've tried "\|extract reload=true" but ... by beaunewcomb Communicator in Getting Data In 02-13-2019 2 15	2	15
what are all the difference betweed windows logs, unix logs, system logs and application logs I am new to Splunk bit confused with these logs by vikram1583 Explorer in Getting Data In 02-13-2019 0 2	0	2
some curl help Hello Splunkers, Can you please help me run this curl command in Unix when im getting error not seeing any data in ... by Splunk_citizen Explorer in Getting Data In 02-13-2019 0 1	0	1
Issue While Onboarding the Data into Splunk Cloud I am new to Splunk Cloud. Recently we have purchased Splunk Cloud for our organization and I have got the Splunk Clou... by anandhalagarasa Path Finder in Getting Data In 02-13-2019 0 1	0	1
fields in different languags Hi when I execute the query below, I have the fields in bold in different languages following the Windows OS languag... by jip31 Motivator in Getting Data In 02-13-2019 0 2	0	2