Getting Data In

Community Activity

How to send an IP and MAC address to a router filter file I’m moving from custom software that writes a snort alert to a file that would filter the device on a router. I’m no... by jcrochon Explorer in Getting Data In 07-30-2018 0 0	0	0
What is the full process to migrate a full Splunk instance (7.0.0) from a server to an another one (Windows Servers 2012 R2) ? My source Splunk server (version 7.0) is physical Windows 2008 R2 My target is a Virtual windows server 2013 R2. I w... by Nieucel Engager in Getting Data In 07-30-2018 0 4	0	4
What architecture will work in this Splunk Distributed Environment ? Hi Team, I have an infrastructure located globally multiple sites around 10 to 15 Sites which can be generated appro... by sivaksk147 Explorer in Getting Data In 07-30-2018 0 7	0	7
Is it possible to know from which heavy forwarder syslog event got indexed by any specific fields in events Any fields in events or raw data holds information about HF through which it got indexed by Jayrsplunk New Member in Getting Data In 07-30-2018 0 9	0	9
Data Filteration from Two Different Sourcetypes How do I display data that must be filtered from attributes from 2 different sourcetypes? The search is a multisearch... by shreyad Explorer in Getting Data In 07-30-2018 0 4	0	4
splunk universal forwerder to splunk enterprise with configured HEC (all on centos 7) Hello , i have spent couple of days to reach some proper loggin to HEC on my enterprise splunk but cant handle it. I... by smstoyanov New Member in Getting Data In 07-30-2018 0 1	0	1
What options are available to offload the data from Splunk Indexers? I'm currently facing an immediate situation where my Splunk Indexers are running of of the disk space. Please let me ... by tmurata_splunk Splunk Employee in Getting Data In 07-29-2018 0 1	0	1
How can I make the sourcetype WinEventLog:Application active? abl-bccwprhyb01 07/19/2017 22:17:10 sqleventlog WinEventLog:Application EPS INACTIVE (7-30days) Source type WinEvent... by asorot Engager in Getting Data In 07-29-2018 1 1	1	1
How do I forward latest file from group of files? I have a folder being monitored by a UF. Three (3) xml files are generated by a software and placed at the same time ... by mawomommoh Path Finder in Getting Data In 07-28-2018 0 5	0	5
How to override automatic key-value extraction which contain single quotes? We have got some data in below format 2018-07-26T01:00:01 empID=12345 empName='Spider Man' department='IT' 2018-07-2... by koshyk Super Champion in Getting Data In 07-28-2018 0 5	0	5
How to create two text boxes on a dashboard with a submit button using JavaScript where entered values get stored in a CSV file? Hi, I want to create a dashboard in which two text boxes will be there with one submit button. Upon clicking the sub... by abhayneilam Contributor in Getting Data In 07-27-2018 1 10	1	10
How to split multiple lines of data into individual lines? Hello every one, I have some data in my Splunk server that is not separated correctly. I want to split this data in... by otman01 Communicator in Getting Data In 07-27-2018 3 11	3	11
Is it safe to delete .bundle files from /opt/splunk/var/run/search peers ? Hi All, Currently we have an disk space issue in two of the splunk indexer instances and we have separate volume cre... by Hemnaath Motivator in Getting Data In 07-27-2018 1 5	1	5
Possible to use setup.xml in an app to create a new data input? So I created an app that defines a new data input type in default/inputs.conf. It uses a modular input and some cust... by guldendraak Explorer in Getting Data In 07-27-2018 0 0	0	0
Index time mapping in inputs.conf I have two fileds TIME and Last execution TIME. In input.conf i have mapped TIME field to use a index time(_time) bu... by DataOrg Builder in Getting Data In 07-27-2018 0 4	0	4
Splunk unable to read files Hi, Splunk UF is setup to read files from particular directory. It reads files normally for few minutes, but suddenly... by ankithreddy777 Contributor in Getting Data In 07-27-2018 0 8	0	8
CSV data vs key-value data. Which is faster for performance? hi, We have an incoming custom dataset which consumes approx 700GB a day and is currently used for CIM. Currently it ... by koshyk Super Champion in Getting Data In 07-26-2018 0 12	0	12
Logs have been FIFO'd but i still need. How do i get them back in? Working in Windows I have a directory of sharepoint logs that i have been pulling for years. I've recently started to... by Jarohnimo Builder in Getting Data In 07-26-2018 0 1	0	1
Why does clustering always appear as a repeat phenomenon without a reason? hello, I have a strange question, This question is described as a bit rough. I have a single site cluster... by xsstest Communicator in Getting Data In 07-26-2018 0 6	0	6
AggregatorMiningProcessor - Breaking event because limit of 256 has been exceeded - data_source= we are getting the below errors from splunkd.log. the issue is we weren't able to search the logs from splunk console... by sandeepkalra New Member in Getting Data In 07-26-2018 0 1	0	1
Why is JSON from scripted input raw events in random orders? have no idea what is going on here. I can make the same api call that the script is and receive the json back in the... by Cuyose Builder in Getting Data In 07-26-2018 0 3	0	3
passing of events field with spaces Hi, I wanted to display Message in message field value. I wanted to do the set up in prof.conf. Can anyone please hel... by swetar New Member in Getting Data In 07-26-2018 0 1	0	1
Modify JSON Objects at indexing time Hello there, I have the issue that there are more events in one JSON-Object. Heres an example: { category: Network... by mdorobek Path Finder in Getting Data In 07-26-2018 0 2	0	2
Pull syslog data from EC2 instance into Splunk We're running an on-prem instance of Splunk Enterprise behind a firewall which (currently) does not permit ingress on... by olgamirth New Member in Getting Data In 07-26-2018 0 2	0	2
To monitor which Windows server are not sending logs to Splunk I want to check which server are not sending logs to Splunk as our monthly maintenance. Can you guys help me what is... by karambaz New Member in Getting Data In 07-26-2018 0 3	0	3