Getting Data In

Community Activity

Forward syslog directly to splunk enterprise from an nginx-plus ingress controller Hi, I am currently working on an nginx plus as ingress controller for my kubernetes and using sc4s to forward logs to... by phu_nguyen Loves-to-Learn in Getting Data In 09-19-2024 0 2	0	2
What’s the recommended batch size per request for sending to HEC? Is there a limit to how many events can be sent to Splunk HEC per event? What’s recommended, are there any guideline ... by spammenot66 Contributor in Getting Data In 09-18-2024 0 3	0	3
Props.conf for ClamAV scan log I have ClamAV running on all my linux hosts (universal forwarders) and all logsseems to be fine except clamav logs. C... by jkamdar Communicator in Getting Data In 09-18-2024 0 1	0	1
Ingest sample data from EC2 AWS instance Hello!I am new to splunk and aws. I just set up splunk in a linux server in aws. I want to now ingest sample data in... by Sherman253 New Member in Getting Data In 09-18-2024 0 1	0	1
session end reason = aged-out Hi,What does session end reason = aged-out mean? We are facing one way audio issue. Could this be possibly a reason? ... by tnegi New Member in Getting Data In 09-17-2024 0 2	0	2
Props.conf - Timestamp extraction failed Hi splunkers ! I m facing an issue that is going to make me crazy ! I've got to set the timestamp in the following lo... by _olivier_ Path Finder in Getting Data In 09-17-2024 0 1	0	1
Setup Azure Storage Account using private endpoint Hello, We're trying to setup the Azure Storage account from the add-on and we're getting authentication failure. Cred... by jmmontejo Explorer in Getting Data In 09-17-2024 0 2	0	2
How to forward from HF to a RFC5424 syslog target Good day,I'm trying to setup the HF to forward to an additional syslog target which expects the RFC5424 (Grafana Allo... by MattKr Explorer in Getting Data In 09-17-2024 0 4	0	4
INPUTS: run same script also if the same is currently running Hi guys.I'd like to know if there is a way to schedule an input script to run multiple times also if it does not end ... by verbal_666 Builder in Getting Data In 09-15-2024 0 8	0	8
. . by Ash1 Communicator in Getting Data In 09-15-2024 0 5	0	5
TA for Dell Unity storage Hi,Is there any Splunk Technology Add-on (TA) for Dell Unity storage? suggestions pls. I see Dell PowerMax and Dell P... by SanjayM Explorer in Getting Data In 09-13-2024 0 3	0	3
Splunk add-on for Google Cloud Platform How to add logs/new Input to have Kubernetes Pod Status? Splunk add-on for Google Cloud Platform How to add logs/new Input to have Kubernetes Pod Status? What are the steps?H... by Cheng2Ready Communicator in Getting Data In 09-13-2024 0 4	0	4
Minimum files and Directories for Custom TA Hello Splunkers,I'm trying to push data to indexers from HF's where I have a syslog-ng receiving the logs. This is fr... by mohsplunking Path Finder in Getting Data In 09-12-2024 0 4	0	4
Source types in /var/log I would like to retrieve the data in /var/log as correctly as possible.Currently I am simply monitoring the entire /v... by jackjack Path Finder in Getting Data In 09-12-2024 1 7	1	7
SA-ldapsearch ldapgroup error We migrated our Splunk indexer from Ubuntu to RHEL recently. Everything appeared to go fine except for this one add-o... by Hiattech Explorer in Getting Data In 09-11-2024 0 2	0	2
Routing of events located at Indexers / Search Heads to another Cluster and vice-versa Hi Community!i have a (kind of ) special problem with my data routing.Topology:We have 2 different Clusters, one for... by FlorianScho Path Finder in Getting Data In 09-11-2024 0 4	0	4
Forward Data to a third-party system Hi, I am using SplunkForwarder to forward data to a non-splunk system by adding the stanza below in outputs.conf. ... by shangshin Builder in Getting Data In 09-11-2024 2 20	2	20
NiFi GetSplunk import events I'm trying to import a csv file generated by the NiFi GetSplunk component. It retrieves events from a Splunk Instance... by hanseMand Observer in Getting Data In 09-11-2024 0 0	0	0
How to forward splunkd.log to a foreign syslog server Dear community,it might be an odd question but i need to forward the splunkd.log to a foreign syslog server,therefore... by MattKr Explorer in Getting Data In 09-10-2024 0 1	0	1
Is it possible to ingest data related specifically from Microsoft Defender Safe Links? Is it possible to ingest data related specifically from Microsoft Defender Safe Links? We have tried both Microsoft ... by rg0nzalez New Member in Getting Data In 09-10-2024 0 1	0	1
Decomissioning indexers I am working to decommission some indexers from my cluster. I am using splunk offline --enforce-counts and letting th... by brent_weaver Builder in Getting Data In 09-10-2024 0 2	0	2
Zscaler log filtering Hello guys,I am quite new on the topic so I really need tyour help ^_^.I am ingesting Zscaler logs in a Splunk Cloud ... by Iana_R Loves-to-Learn Lots in Getting Data In 09-10-2024 0 1	0	1
Event does not break right Hi folks..I have an issue where I can't get an event to break right.The event looks like this **********************... by jesperbassoe Explorer in Getting Data In 09-09-2024 0 4	0	4
line break to different entries I have logs indexed like this. How to break entries based on each lines . i need each line as a seperate entry. I tr... by arunkuriakose Explorer in Getting Data In 09-09-2024 0 7	0	7
401 Unauthorized when trying to use REST API Hello, i am trying to intergrate the Splunk Ui Toolkit into my own Splunk instace that is running on localhost.I am ... by yallami Explorer in Getting Data In 09-09-2024 0 3	0	3