Getting Data In

Community Activity

Use NAS as cold storage We are using a clustered index environment and want to use NAS as our cold storage. I mapped NAS to a local folder fo... by Nawab Communicator in Getting Data In 07-23-2024 0 2	0	2
Microsoft Teams PSTN call logs Hello, We are interested in capturing Microsoft Teams PSTN call records. There is a Microsoft Graph API with specif... by sc3 New Member in Getting Data In 07-23-2024 0 2	0	2
Forward data from Netscout to Splunk Hello everyone, im new in Splunk and still need a lot to know.I want to ask question, how to forward data in JSON for... by Rizqi_Iskandar Loves-to-Learn Lots in Getting Data In 07-21-2024 0 4	0	4
_raw data _raw data exported from a search query. This not the actual raw data stream from the sending device, correct? This is... by splunkville Observer in Getting Data In 07-21-2024 0 1	0	1
Is there a way to get inputs.conf on the deployment server via the rest API? We can reach via https://<deployment server>:8089/services/deployment/server/applications/<app name> to the deplo... by ddrillic Ultra Champion in Getting Data In 07-20-2024 0 16	0	16
Timestamp file breakup get-brokersession is run via powershell and sent to a txt file. The information is getting into splunk however, eve... by kmm2 Path Finder in Getting Data In 07-19-2024 0 1	0	1
Line Breaking The above screen shot Blue color line event into one Event and above Blue color lines in to single event please provi... by vijreddy30 Loves-to-Learn Everything in Getting Data In 07-19-2024 0 6	0	6
Load Balancing at Splunk With load balancing the Universal Forwarder sends data to all the indexers equally so that no indexer should get all ... by ibraheem Explorer in Getting Data In 07-19-2024 0 0	0	0
Prevent ingestion of "NT AUTHORITY\SYSTEM" EventCode 4663 I am exceeding my 5GB license. I have determine the problem by doing a 24 hour search using the following: index="win... by sswigart Explorer in Getting Data In 07-18-2024 0 2	0	2
Get logs Hello everyoneI want help on how to deal with the following problemA company that got hacked and we want to know how ... by tuts Path Finder in Getting Data In 07-18-2024 0 5	0	5
Multisite indexer cluster : Why is data from other sites retrieved? Why is data from other sites retrieved? 1. splunk version 9.2.1 2. server.conf : manager-node [general] ser... by Cloud001 Explorer in Getting Data In 07-17-2024 0 11	0	11
Text File Ingestion I want Splunk to ingest my AV log. I made the following entry in the inputs.conf file:Note: The log file is a text fi... by sswigart Explorer in Getting Data In 07-17-2024 0 1	0	1
Splunk timeformat issue Hello Splunkers!! I have a below event and I want to parse. But the event is not parsing with time format in Splunk. ... by LogUx Motivator in Getting Data In 07-17-2024 0 26	0	26
moving data from hot/warm to cold DB i'm facing problem with the storage of splunk i tried multiple way to minimize the heavy data stored at hot/warm DB b... by KhalidAlharthi Explorer in Getting Data In 07-16-2024 0 2	0	2
Monitor CPU cores of a Linux machine Hi, I have a Linux machine running on Centos 6.10 with a quad-core processor (16 threads) On Splunk, is there a way... by hishamjan Explorer in Getting Data In 07-16-2024 0 5	0	5
Collect log - Azure Ad reset password Hello guys, I need to collect logs when the "admin of azure" reset password or exclude one account.I have tried use ... by paul_mm New Member in Getting Data In 07-16-2024 0 1	0	1
CSV Field Extraction Cutting Off at 1,000 Characters I am trying to ingest data from a CSV file. One of the columns in the CSV file contain SQL queries. The header has fi... by Jornoh Loves-to-Learn in Getting Data In 07-16-2024 0 2	0	2
Simple installation script for Universal Forwarder When you have more than a few forwarders to maintain, it becomes tedious (and error-prone) to install them one-by-one... by lguinn2 Legend in Getting Data In 07-15-2024 15 32	15	32
Splunk Enterprise Installation Rollback Hi Trying to install Splunk Enterprise on Windows Server 2022 with my Domain account but every time I install it, it ... by eoronsaye Loves-to-Learn Lots in Getting Data In 07-15-2024 0 2	0	2
500 Internal Server Error Returned - AlgoSec V2 Splunk Installation Could I please get assistance on how to resolve this issue and get the AlgoSec App for Security Incident Analysis and... by Network007 Loves-to-Learn Lots in Getting Data In 07-14-2024 0 0	0	0
Why am I receiving the 500 internal server error when going to any Splunk control settings? hi guys doe anyone know why i could be getting this error. it pops up whenever i go to any splunk control like: setti... by zubairaizatron Explorer in Getting Data In 07-14-2024 0 4	0	4
Curl command data collection I am using a curl command to get data from an api endpoint, the data comes as a single event but I want to be able to... by MichaelBs Loves-to-Learn Everything in Getting Data In 07-14-2024 0 4	0	4
File Integrity Monitoring - Splunk 6 With FSChnage being deprecated in Splunk 5.0, what is the best method in Splunk 6 to monitor folder/file changes? Th... by dgavic Explorer in Getting Data In 07-14-2024 0 5	0	5
Failed to parse timestamp in psv file I have the following pipe separated value file that I am having problems onboarding. The first row is the column hea... by the_sigma Explorer in Getting Data In 07-12-2024 0 4	0	4
Logs ingestion from Linux servers Recently, I installed new Splunk Enterprise 9.2.1 (on-prem) on RHEL8 server and have installed Universal Forwarders o... by jkamdar Communicator in Getting Data In 07-12-2024 0 10	0	10