Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
[monitor://\\njros1bva0597\d$\LogFiles\warcraft-9.0.71\logs\*]
disabled = false
host = NJROS1BVA0621
alwaysOpenFile =...
by
Cheng2Ready
Communicator
in
Getting Data In
07-15-2025
|
0
|
6
| ||
|
|
Trying to filter out all perfmon data using ingest actions. so, i try and see the samples and i get this error
...
by
tbarn005
Engager
in
Getting Data In
07-10-2025
|
0
|
7
| ||
|
Hi Splunk Gurus,
I’m working on a script to programmatically check if logs from a specific host are available in S...
by
asah
Engager
in
Getting Data In
07-16-2025
|
0
|
2
| ||
|
I'm cloning the event and before cloning extracting sourcetype to use later.
transforms.conf [copy_original_so...
by
sudha_krish
Explorer
in
Getting Data In
07-15-2025
|
0
|
5
| ||
|
|
Currently I have setup Splunkstream, but there is a condition where I want to disable some data sources from certain ...
by
elend
Path Finder
in
Getting Data In
07-14-2025
|
0
|
4
| ||
|
|
Configuring Internal Log Forwarding
1- 1sh 2 indx 2 if and 4 uf 1 mc
2- I can see only idx internal logs though ...
by
Mirza_Jaffar1
Loves-to-Learn
in
Getting Data In
07-14-2025
|
0
|
4
| ||
|
I want to provide a standard Splunk user the ability to upload files via the web UI.Specifically, so that members of ...
by
nickhills
Ultra Champion
in
Getting Data In
07-14-2025
|
0
|
1
| ||
|
I have created a pipeline for filtering data coming into the sourcetype = fortigate_traffic.I would like to further a...
by
Rani2
Loves-to-Learn
in
Getting Data In
07-09-2025
|
0
|
1
| ||
|
Does anyone have a cheat sheet for btool to help newbies?
Here is my version of btool cheat sheet:
splunk...
by
youngsuh
Contributor
in
Getting Data In
08-19-2020
|
1
|
8
| ||
|
|
Hi,
We’re currently facing a load imbalance issue in our Splunk deployment and would appreciate any advice or best ...
by
mcfabrero_acn
Explorer
in
Getting Data In
07-11-2025
|
0
|
3
| ||
|
|
Dear splunk community,
After successfully implementing the input from
@afx :
"How to Splunk the SAP Security ...
by
SPLAUR
Engager
in
Getting Data In
07-07-2025
|
0
|
6
| ||
|
The Splunk app for Linux already provided a stanza for collecting all the .log files in the /var/log folder ([monitor...
by
Na_Kang_Lim
Path Finder
in
Getting Data In
07-10-2025
|
0
|
4
| ||
|
|
Hi Splunk Community,
I’m trying to reduce disk space usage on my Splunk Universal Forwarder by filtering out un...
by
tbarn005
Engager
in
Getting Data In
07-03-2025
|
0
|
6
| ||
|
|
I feed data to Splunk using the HTTP Event Collector, sample event:
{<!-- -->
"event":{<!-- -->
"event_id": "58512040",
"even...
by
mmaaxx
Explorer
in
Getting Data In
07-09-2025
|
0
|
5
| ||
|
|
Guys i have Splunk Cloud , i created Http Event Collector & in prisma i gave url /service/collector
but logs ar...
by
XOR
Loves-to-Learn
in
Getting Data In
07-08-2025
|
0
|
3
| ||
|
|
When collecting Linux logs using a Universal Forwarder we are collecting a lot of unnecessary audit log from cronjobs...
by
fatsug
Builder
in
Getting Data In
07-08-2025
|
0
|
5
| ||
|
|
Hi,
I am running splunk standalone 8.4.1 with Citrix add-on installed 8.2.3. Also, I have SC4S running version 3.3...
by
corti77
Contributor
in
Getting Data In
05-08-2025
|
0
|
4
| ||
|
|
I'm getting duplicated data when using lambda function to send events from cloudwatch to splunk through HTTP Event Co...
by
wsmworkhard
Explorer
in
Getting Data In
05-06-2019
|
0
|
3
| ||
|
|
We are getting the following error when trying to ingest EXO mail logs into splunk using the add-in.
line 151, in _...
by
TestAdminHorst
New Member
in
Getting Data In
07-02-2025
|
0
|
2
| ||
|
|
Onboarding Cisco FTD firewalls presents the choice of which Add-On to use. Apparently Cisco FTD firewalls run both AS...
by
kfsplunk
Loves-to-Learn
in
Getting Data In
07-02-2025
|
0
|
2
| ||
|
|
Hello Everyone
I need to export the search results to a folder outside the Splunk. To do this job we've exportresul...
by
DineshElumalai
Explorer
in
Getting Data In
07-02-2025
|
0
|
3
| ||
|
|
I am getting the below error.
Unable to initialize modular input "TA-Akamai_SIEM" defined inside the app "Splunk_T...
by
kaushik3g
Engager
in
Getting Data In
10-11-2018
|
0
|
4
| ||
|
|
We are experiencing consistent log duplication and data loss when the Splunk Universal Forwarder (UF) running as a He...
by
Ravi1
Loves-to-Learn
in
Getting Data In
06-30-2025
|
0
|
1
| ||
|
|
The current Netscaler guidance is that logs should be exported via HEC. However, it seems like the app doesn't have a...
by
_joe
Contributor
in
Getting Data In
06-30-2025
|
0
|
1
| ||
|
|
Hello!
I have logs from Domain Controller Active Directory in Splunk and try to configure monitoring of user logon...
by
Kosyay
Explorer
in
Getting Data In
06-25-2025
|
0
|
12
|
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Top Labels
-
add-on
2 -
administration
11 -
AIX
1 -
audit
1 -
blacklist
91 -
CLI
1 -
configuration
30 -
CSV
206 -
data
458 -
development
5 -
encryption
1 -
eval
2 -
field extraction
548 -
fields
5 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
921 -
host
154 -
HTTP Event Collector
430 -
index
535 -
indexer
696 -
indexing performance
1 -
inputs.conf
823 -
installation
4 -
intermediate forwarder
138 -
introduction
3 -
JSON
387 -
kvstore
1 -
Linux
447 -
login
1 -
Mac
30 -
metadata
1 -
metrics
2 -
modular input
185 -
monitor
308 -
monitoring console
1 -
other
41 -
proactive Splunk component monitoring
2 -
props.conf
964 -
regex
5 -
saved search
2 -
scripted input
241 -
search
1 -
search head
2 -
source
290 -
sourcetype
488 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
309 -
time
204 -
transforms.conf
570 -
troubleshooting
15 -
universal forwarder
1,532 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
15 -
whitelist
60 -
Windows
578 -
XML
90
- « Previous
- Next »
Get Updates on the Splunk Community!
Thanks for the Memories! Splunk University, .conf25, and our Community
Thank you to everyone in the Splunk Community who joined us for .conf25, which kicked off with our iconic ...
Data Persistence in the OpenTelemetry Collector
This blog post is part of an ongoing series on OpenTelemetry.
What happens if the OpenTelemetry collector ...
Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever
Now On Demand
Whether you're managing complex deployments or looking to future-proof your data ...
