Getting Data In

Community Activity

Extract full XML from Windows EventLog sent by UF Hello all, I have some events like this which are forwarded to Splunk from UF <Event xmlns='http://schemas.microsoft... by Cbr1sg Path Finder in Getting Data In 01-21-2019 0 3	0	3
Log to Metrics - No data getting displayed when Metric Measures names are entered I am trying Log to metric feature. I tried getting data in using Add Data feature. But no data preview gets displayed... by ashishmaind1990 Engager in Getting Data In 01-21-2019 2 1	2	1
Why deployment-server can't display app of UF by handshake failure? UF : 6.4.5 Deployment-server : 6.6.11 If I execute this in UF, it is no problem. /opt/splunkforwarder/bin/splunk di... by yutaka1005 Builder in Getting Data In 01-21-2019 1 3	1	3
Can you help us parse the following JSON ? i have tried the spath command, but no results. I would like to display the below data into a table as shown below: ... by saranya12 New Member in Getting Data In 01-21-2019 0 4	0	4
[Time Extraction] EventTime extraction for log file with event having different time fileds In one log file, we have data format that different for Event time: i) For this we would like "time":1544476509062 ... by rbal_splunk Splunk Employee in Getting Data In 01-21-2019 0 1	0	1
Search Head cant see data in Indexers Hi For the first time i am trying to configure a distributed search (Non Clustered). http://docs.splunk.com/Document... by robertlynch2020 Influencer in Getting Data In 01-21-2019 0 6	0	6
index start date I need to generate a daily report in splunk with the list of all the indexes and their earliest event(timestamp) and ... by sushil_borah Explorer in Getting Data In 01-21-2019 1 10	1	10
Universal Forwarder with Sysmon not forwarding Correctly Hi, I'm trying to study the activities of some Malware thus I created the following environment using virtualbox. Bu... by wuming79 Path Finder in Getting Data In 01-20-2019 0 10	0	10
How to extract only the values that has the same timestamp from two different fields in a range of time PLEASE HELP ME!!! Hello! I have events from two different fields that are correlate each other by the time. So I want to make a table... by danielgp89 Path Finder in Getting Data In 01-20-2019 0 2	0	2
split each line as separate event I am getting disk space detail like below root 13G 7.4G 4.1G 65% / tmpfs 6.3G 0 6.... by harishsundharam New Member in Getting Data In 01-20-2019 0 3	0	3
hadoop Connect Test I have Installed Splunk and Hadoop on the google cloud Plateform and i have installed the Hadoop Connect on one of th... by iamvinay New Member in Getting Data In 01-19-2019 0 2	0	2
could not send data to the output queue? I'm tring to troubleshoot a problem with sending data from a light forwarder to a splunk server. In this particular ... by jbanda Path Finder in Getting Data In 01-18-2019 9 17	9	17
Indexer Cluster & Search Head Indexes.conf Hey, I'm setting up an Indexer Cluster and a Search Head for the first time and I'm facing an issue on the Search He... by LordLeet Path Finder in Getting Data In 01-18-2019 0 6	0	6
Is there a potential data loss with UDP? We are forced to use UDP (and not TCP) for one client and we wonder how much data loss we might expect with UDP. Any... by ddrillic Ultra Champion in Getting Data In 01-18-2019 0 4	0	4
Need help: why my search head is not using the settings in transforms.conf I am migrating from a stand-alone Splunk instance to a Splunk cluster (w/ search-head-cluster + indexer-cluster) and ... by patng_nw Communicator in Getting Data In 01-18-2019 0 6	0	6
Can you help me figure out why some files were not sent to the Heavy forwarder? The universal forwarder (UF) seems to read the following files, but the files were not sent to the heavy forwarder (H... by kinaba_splunk Splunk Employee in Getting Data In 01-18-2019 0 1	0	1
Testing Splunk UF config on Windows, with Inspec. Hi, I have 2 installations of Splunk. One on a Linux image, one on a Windows 2016 image - both on AWS. I am testing... by northernstar002 New Member in Getting Data In 01-18-2019 0 0	0	0
Search head is not communicating with its peer(Indexer) Error [00000080] Instance name "XXX.XXX.XXX.XXX:8089" REST interface to peer is taking longer than 5 seconds to respo... by ashishlal82 Explorer in Getting Data In 01-18-2019 0 5	0	5
Universal Forwarderが全てのWindows Security Event Logを送付できてない WindowsドメインコントローラにインストールされたUniversal Forwarder ( UF ) は Windows Security Event Log しか監視していないが、全ての Event Log を Indexer... by cweiliou_splunk Splunk Employee in Getting Data In 01-18-2019 0 1	0	1
Universal ForwarderのCPU使用率を下げる方法について WindowsサーバにインストールされたUniversal Forwarder ( UF ) が時々20%くらいまでCPUを使用してしまいます。常に20%ではなく、急に20%まで上昇し、そして、何分後にまた3, 4%まで下がりますが... by cweiliou_splunk Splunk Employee in Getting Data In 01-18-2019 0 1	0	1
Extract both general and xml contents from Windows Event log Hello all, I have UF installed in Windows servers to collect event. inside the inputs.conf there is only option to tu... by Cbr1sg Path Finder in Getting Data In 01-17-2019 0 0	0	0
How to configure Splunk docker container I want to know the steps on setting up Splunk in Docker container by mbagali_splunk Splunk Employee in Getting Data In 01-17-2019 0 1	0	1
How do I exclude stream events based on criteria before indexing? Hi All, I require to exclude events when the 'dest_port=80'. I have gone through other similar examples and have com... by lznger88_2 Path Finder in Getting Data In 01-17-2019 0 4	0	4
Folder creation in /opt/splunk/ directory. Hi, Can we create a custom folder in /opt/splunk/etc/ directory. Will that affect any functionality of Splunk ? Bas... by nawazns5038 Builder in Getting Data In 01-17-2019 0 1	0	1
Why is the Http event collector not visible in UI? Hi, Splunk version : 6.6.1 Http event collector not visible in UI, we are not able to find it under data inputs. A... by ArunSudarsanam1 Explorer in Getting Data In 01-17-2019 2 5	2	5