Getting Data In

Community Activity

Crowd sourcing sensitive data masking rules (PII, Passwords, keys, etc.) for various sourcetypes My team has a number of index-time sedcmd-based password masking rules for words in known positions of passwords. Th... by dstaulcu Builder in Getting Data In 05-18-2018 0 3	0	3
extract field from adfs logs I am trying to extract data out of an adfs log, but I do not how how I would do this (regex and I can't seem to get a... by jbanda Path Finder in Getting Data In 05-18-2018 0 1	0	1
Data is not indexed from a critical log file. Data is not indexed from critical log file. File /var/abcACSLog.txt rotates by its volume, like every 100MB and immed... by sylim_splunk Splunk Employee in Getting Data In 05-18-2018 0 2	0	2
Why is the Windows universal forwarder not showing in forwarder management? I am trying to create a new universal package for our windows servers. The log data from our test server is showing u... by Rebeccakettler Path Finder in Getting Data In 05-18-2018 0 2	0	2
Remove { } from json file before indexing HI, i am trying to index a local json file, but when going trough the sourcetype the predefined json source type is ... by abilis Explorer in Getting Data In 05-18-2018 0 2	0	2
Forward data to third party and self-service Splunk Cloud We are using self-service Splunk Cloud. and all clients are using UF to directly send data to self-service Splunk Clo... by aanataliya Explorer in Getting Data In 05-18-2018 0 0	0	0
How to add IIS logs and Apache logs to common information model for web ? Hi All, We would like to added the IIS logs and Apache logs to the CIM model for the Web, not sure what exactly need... by Hemnaath Motivator in Getting Data In 05-18-2018 0 1	0	1
Convert time to the specific City Timezone I need to create a report of all remote logins of users. All the times are in EST in Splunk. We need to convert it to... by jarapally Explorer in Getting Data In 05-18-2018 0 4	0	4
I want to set a different "time zone" from the "time zone" in the log. If there is a log like below that have time zone "+00:00", how can I set different time zone? 2018/5/9 3:00:00+00:00... by yutaka1005 Builder in Getting Data In 05-18-2018 0 10	0	10
inputs.conf configuration for key value pair Hi, I have the below data that I will be importing into splunk. Id like to be able to delimit based on the FIRST (a... by dbcase Motivator in Getting Data In 05-18-2018 0 6	0	6
Can we use REST API instead of Universal Forwarder to send logs to indexer, if so, How can we do that? How can we send the logs through REST API without using the Universal forwarder on the application server or any sour... by saicool Engager in Getting Data In 05-18-2018 0 1	0	1
How to configure EXPORT Excel (add on) if AdvanceXML is Deprecated ? As i can see in this documentation http://docs.splunk.com/Documentation/Splunk/7.1.0/AdvancedDev/Whatsinthismanual#A... by jadengoho Builder in Getting Data In 05-17-2018 0 0	0	0
Is there any way via REST to get JSON raw data from Splunk for a given query? Is there any way how I can get JSON raw data from Splunk for a given query? Consider the following timechart query: ... by jibiuthaman Explorer in Getting Data In 05-17-2018 1 3	1	3
Steps to setup splunk forwarder for splunk in the cloud Can you please provide the steps to configure splunk forwarder to talk to a splunk web instance in the cloud? by raghunand Explorer in Getting Data In 05-17-2018 6 7	6	7
How can I eliminate logs before indexing? Hi, Someone can help me in filtering logs from Checkpoint before they are indexing? I tried following that link: ht... by monteirolopes Communicator in Getting Data In 05-17-2018 0 4	0	4
Docker Splunk logging driver per line 4K byte limit. We are using splunk logging driver to send docker container logs and some containers are sending log messages >4K byt... by kyaparla Path Finder in Getting Data In 05-17-2018 0 5	0	5
What is the easiest way to get data from a Kiwi Syslog server into Splunk? We have two Kiwi Syslog servers and we would like to migrate the existing data flow from the Kiwi Syslog servers over... by kforr74 Explorer in Getting Data In 05-17-2018 0 3	0	3
Fishbucket and history indexes enabled but empty I have just taken over a Splunk system and I noticed the fishbucket and history indexes are empty even though they ar... by chiash New Member in Getting Data In 05-17-2018 0 0	0	0
Splunk GET to fatch data from some website with login Hi Everyone, I have an online reporting tool, which can generate the report and download it my system as excel. I re... by Chandras11 Communicator in Getting Data In 05-17-2018 0 4	0	4
How to find monitored csv files with more than a 100k rows? Is there a log or a command output that I can use to determine the number of rows each CSV file that is being monitor... by jiaqya Builder in Getting Data In 05-17-2018 0 2	0	2
Wrap a webhook for use with HTTP Event Collector I have an external system that generates a Webhook that can be posted to a URL of my choosing. I would like to log t... by joxley Path Finder in Getting Data In 05-16-2018 1 6	1	6
Sudden excessive WinEventLog:Security events involving splunkd.exe Splunk Universal Forwarder is v6.4.x Splunk Server is v6.5.x In C:\Program Files\SplunkUniversalForwarder\etc\apps\S... by nk-1 Path Finder in Getting Data In 05-16-2018 1 3	1	3
How to route an index based on a search-time extracted field? I wish to use a search-time extracted field as the basis for routing to a specific index. In my props.conf file I ha... by mspetrovic Engager in Getting Data In 05-16-2018 0 2	0	2
How to add the destination port value for a firewall events in splunk ? Hi All, Today one of the user notified that for some of the events the events the destination port field value was l... by Hemnaath Motivator in Getting Data In 05-16-2018 0 3	0	3
Can you monitor a keyword on logs in real time or do I have to manually start it? My question is about monitoring a keyword on logs. Is the monitoring started when I search a keyword, or is it monit... by jbosano Engager in Getting Data In 05-16-2018 0 2	0	2