Getting Data In

Community Activity

Can I monitor change on a remote file share directory? I am trying to monitor the change on a remote file share directory. I want to know when the file changed, who made th... by samlinsongguo Communicator in Getting Data In 01-31-2019 0 2	0	2
whitelist and blacklist combination for inputs.conf A quite tricky scenario for us in inputs.conf for one of the app. We have multiple directory structure within /var/lo... by koshyk Super Champion in Getting Data In 01-31-2019 0 3	0	3
How do you calculate SLA with unstructured date format? hi guys, can you please help me in how we can we try to convert this value 2019-01-28-20-32-49 to 2019-01-28 20:00... by pench2k19 Explorer in Getting Data In 01-31-2019 0 20	0	20
During the forwarder Install, Is it possible to set up deploymentclient.conf parameters via the command line? Hello, Is it possible to set up deploymentclient.conf parameters via the command line? I have used DEPLOYMENT_SERVE... by prakhersinghal Explorer in Getting Data In 01-31-2019 0 10	0	10
How can i collect NAS data into my Splunk Hello, I'm trying to connect my NAS Synology RS3617 to Splunk but i don't know how to do it. During my research on t... by cherifa Explorer in Getting Data In 01-31-2019 0 6	0	6
Universal Forwarderについてお世話になっております。 Universal Forwarderについて教えてください。現在、ログを送信したいサーバにUniversal Forwarder、ログを管理したいサーバにSplunk Enterprizeをインストー... by arai0729 Explorer in Getting Data In 01-30-2019 0 2	0	2
Regroup Splunk events with almost similar _time Hello all, Every 10 seconds, I send a bunch of events to Splunk. I need to count how many events I receive every 10 ... by Zakary_n Path Finder in Getting Data In 01-30-2019 0 5	0	5
How do you mask values using SEDCMD in payload emitted in the logs? I need help in masking data in the payload emitted in the log. The application writes logs to Windows Event logs - ... by nmohammed Builder in Getting Data In 01-30-2019 0 2	0	2
Filtering the data to different indexes Hello Guys, I have Splunk instance which is receiving data from different instances like DEV, QA, UAT and PROD. For ... by vishaltaneja070 Motivator in Getting Data In 01-30-2019 0 0	0	0
How do you identify keywords from a .CSV and report them? Hi all, I'm a bit of Splunk newbie, please bear with me! Our web filtering software is currently forwarding events t... by danfinan Explorer in Getting Data In 01-30-2019 0 2	0	2
Filter Events before Indexing I get events from a universal forwarder. If "alertd[123456]: ABC:" be in the event, i would like to index it. All oth... by mh0712 New Member in Getting Data In 01-30-2019 0 3	0	3
How do I index only critical events? I'm trying to use advanced whitefilter, but I'm coming up short. Basically, I want to index all Windows event logs th... by tmontney Builder in Getting Data In 01-30-2019 0 9	0	9
Why does data stop getting indexed after a log rotation? Hi, I noticed that, right after a log rotation, the data is not being indexed anymore. Data is still going through ... by Arkon Explorer in Getting Data In 01-30-2019 3 27	3	27
ThruputProcessor - Current data throughput (266 kb/s) has reached maxKBps. As a result, data forwarding may be throttled. Consider increasing the value of maxKBps in limits.conf.? What does the message in the forwarder server "ThruputProcessor - Current data throughput (266 kb/s) has reached maxK... by pavanae Builder in Getting Data In 01-29-2019 0 3	0	3
What is the best Windows system for Splunk ? Hello, I want to deploy Splunk for my system but i don`t know what version of Windows is the best running together w... by sieutruc Contributor in Getting Data In 01-29-2019 0 3	0	3
SSL between forwarders and indexers Is it possible to have index cluster tier which can support both non-ssl and ssl forwarders without running multiple ... by jatin_patel Path Finder in Getting Data In 01-29-2019 1 6	1	6
json split out nested key/values to separate events Hello, I have a giant JSON blob that has some similar key names for nested events w/ different values. I'd like 1 ite... by zhatsispgx Path Finder in Getting Data In 01-29-2019 0 0	0	0
Whats the best way to get Azure Security center logs to Splunk? Hello, Are there any other options to on-board azure security center alerts to Splunk other than eventhub? by knalla Path Finder in Getting Data In 01-29-2019 1 1	1	1
Is it possible to transfer data from a heavy forwarder to two different cloud (cloud 1 and cloud 2) indexers? I have one heavy forwarder and two different cloud indexers. heavy forwarder (HF)indx1(placed in cloud 1)indx2(place... by vin02ptl Explorer in Getting Data In 01-29-2019 0 9	0	9
How do you run a Python script on a universal forwarder before taking input? I want to take input from a forwarder, but before that, I want to filter the data with the help of a Python script. ... by yashjain12yj New Member in Getting Data In 01-29-2019 0 1	0	1
Universal Forwarder listening on port 8089 I am running across a number vulnerability assessment findings regarding sslv2 being accepted on my SPLUNK Universal ... by trross33 Path Finder in Getting Data In 01-29-2019 6 10	6	10
Can I use a python script on a Windows universal forwarder? os: windows 7-64bit / splunk 6.2.0 / universal forwarder 6.2.0 current my python inputs.conf [script://.\bin\test\t... by ryuch2002 Explorer in Getting Data In 01-29-2019 0 5	0	5
How do you delete an index from a Splunk deployment with a non-clustered Indexer setup? Hi, I would like to remove an index using the Splunk remove index command. My environment has a non-clustered Index... by aknsun Path Finder in Getting Data In 01-28-2019 0 3	0	3
i am trying to collect event metrics from application logs from splunk for prometheus. Can anyone please guide me how to do ? For eg via below code i get the logs but how to get metrics from them and how i can use them in prometheus ? import... by iamlucky92 Observer in Getting Data In 01-28-2019 0 1	0	1
How to input for s3 buckets compressed file without .gz extension? How to ingest files in S3 buckets that are compressed but do not have .gz extension: ie: s3://Blah-main/2018/04/20/16... by etchouako Explorer in Getting Data In 01-28-2019 2 4	2	4