Getting Data In

Community Activity

Splunk Addon for Unix cannot decode auditd logs Good day,I have installed Splunk ES v9.2.1 on a Linux server (CentOS 7.9). On Splunk ES server, I have installed Splu... by NatSec Explorer in Getting Data In 07-31-2024 0 1	0	1
How do I deal with inconsistent time formats from Microsoft Azure? When ingesting Microsoft Azure data, we see different time formats for different Azure categories, and I wonder how t... by danielbb Motivator in Getting Data In 07-31-2024 0 1	0	1
Input Google Workspace logs of specific users? The GWS is running for the whole company.Is it possible to only input a part of users' logs into Splunk, using add-on... by yanjingz Splunk Employee in Getting Data In 07-31-2024 0 1	0	1
How to send syslog using rsyslog over TCP encrypted with TLS? Hello All, Currently a certain application is sending the data to splunk via syslog method(rsyslog) using TCP, so no... by im_bharath Path Finder in Getting Data In 07-31-2024 0 3	0	3
Only 1 forwarder showing logs in Month, Day, Year format. I want default of Day, Month, Year. I'm running Splunk Enterprise 9.1.1. It is a relatively fresh installation (done this year). Splunk forwarders are ... by sarlacc Explorer in Getting Data In 07-30-2024 0 6	0	6
Need assistance in setting a sourcetype--date/time I am trying to create a sourcetype for a new client:Note StartDate=xxxx is where the log begins. However the StartTi... by NanSplk01 Communicator in Getting Data In 07-30-2024 0 5	0	5
value appearing twice for JSON, none of the old answers work using UF to send json file and below are the props.conf.[test_json]pulldown_type = trueLINE_BREAKER = ([\r\n]+)INDEXE... by yohhpark Path Finder in Getting Data In 07-30-2024 0 21	0	21
How I can enable monitoring of USBSTOR in Splunk Web? I am wanting to go into the Splunk Web and monitor the USBSTOR in Windows 10. I am selecting the "New Registry Monit... by m130carbine Loves-to-Learn Lots in Getting Data In 07-30-2024 0 1	0	1
Kerio Control Hello everyone, I want the Kerio Control technical guide that provides details on how to set up and configure a Syslo... by tuts Path Finder in Getting Data In 07-30-2024 1 2	1	2
Json Data not parsing properly . i have json data but all the data getting in single event not parsing properly each event here is adding the event da... by chandrasekhar46 Loves-to-Learn Everything in Getting Data In 07-30-2024 0 6	0	6
Syntactical Error in WQL Hello,I am currently using Splunk UF 7.2 on a Windows Server, and my UF is configured on D Drive.I am getting below e... by sarvesh_11 Communicator in Getting Data In 07-29-2024 0 3	0	3
re-route logs from one index to another HelloI have one big index with lots of files which I want to reroute logs from there to different indexesThe reroute ... by sarit_s6 Engager in Getting Data In 07-29-2024 0 12	0	12
splunk forwarder - blue cape security tutorial Hello Splunk communityin a nutshell my problem is i have set up splunk and a forwarder on a server, added input and o... by benmstl New Member in Getting Data In 07-27-2024 0 2	0	2
How to reroute events from TCP routed index to a different index Hello, we receive data using _TCP_ROUTING from forwarders from another team using another Splunk cluster.We don't use... by splunkreal Influencer in Getting Data In 07-26-2024 0 2	0	2
inputs.conf TCP One port multiple indexes ? Hey allI am taking input over TCP by having this in my inputs.conf [tcp://1.2.3.4:123] connection_host = ip index = i... by Silah Path Finder in Getting Data In 07-26-2024 0 4	0	4
MS security integration with splunk Hi All,Data is not getting indexed after adding the conf by pavithra Explorer in Getting Data In 07-25-2024 0 3	0	3
Strip control/color codes I have log files with color codes and control characters that we'd like to strip because they clutter the search resu... by oreoshake Communicator in Getting Data In 07-25-2024 1 9	1	9
Slice Messages Before Search Time How can I cut some parts of my message prior to index time?I tried to use both SEDCMD and transform on raw messages b... by DoubleAka Observer in Getting Data In 07-25-2024 0 4	0	4
WEF .conf files Hi, in our organization we use wef to monitor windows. we configure an inputs.conf for monitoring from the Event view... by Gil Explorer in Getting Data In 07-25-2024 0 8	0	8
Addig data input Hello Splunkersi have clustered splunk 9.2.1 on prem, i have pushed an app from the CM to search head cluster and try... by msalghamdi Path Finder in Getting Data In 07-24-2024 0 2	0	2
Splunk Add-on Builder - send metrics with helper.new_event method? HelloI am building an app using the Splunk Add-on builder. Can I use the helper.new_event method in order to send a m... by c86 Loves-to-Learn in Getting Data In 07-24-2024 0 0	0	0
Solution: Splunk Enterprise Security (ES) incident review not showing notables or Splunk core settings issue Subject moved to https://community.splunk.com/t5/All-Apps-and-Add-ons/Solution-Splunk-Enterprise-Security-ES-incident... by splunkreal Influencer in Getting Data In 07-23-2024 0 1	0	1
linux logs only showing epoch time - how to convert epoch time upon ingestion in props/trans linux logs only showing epoch time - how to convert epoch time upon ingestion in props/trans ?is there a way or a con... by jcorcorans Explorer in Getting Data In 07-23-2024 0 1	0	1
Use NAS as cold storage We are using a clustered index environment and want to use NAS as our cold storage. I mapped NAS to a local folder fo... by Nawab Communicator in Getting Data In 07-23-2024 0 2	0	2
Microsoft Teams PSTN call logs Hello, We are interested in capturing Microsoft Teams PSTN call records. There is a Microsoft Graph API with specif... by sc3 New Member in Getting Data In 07-23-2024 0 2	0	2