Getting Data In

Community Activity

	What is the best practice for DB Connect TLS connections? We struggled a bit to make the DB Connect connection using TLS. Apparently we have a choice between SQL Service and a... by spl_aficionado Path Finder in Getting Data In 03-08-2026 0 1	0	1
	Should I split inputs and props into distinct apps? Our custom here is to create a props app and an inputs app. The inputs apps are being deployed on the on-prem side, w... by spl_aficionado Path Finder in Getting Data In 03-05-2026 0 5	0	5
	props source stanza will not match I have these two files:EventLogger.logHOSTNAME-eventlog-TIMESTAMP.xmlThe structure of their content is the same. Exce... by zapping575 Communicator in Getting Data In 03-04-2026 0 6	0	6
	Using EventGen to simulate data to test my Splunk build Hi, I am using this app: https://splunkbase.splunk.com/app/1924I am trying to use this SA-EventGen application, to si... by ASGrover Loves-to-Learn Lots in Getting Data In 03-04-2026 0 1	0	1
	Does Cribl always produce cooked data? I realize in the new system I take care of, that all the Windows wineventlogs are being streamed to Splunk via Cribl,... by LovingSplunk Path Finder in Getting Data In 03-03-2026 0 4	0	4
	How to integrate threat armor with splunk? Hi Team,I couldn't find any documentations for integrating Keysight threat armor with splunk. Kindly share the integr... by siddiq Loves-to-Learn in Getting Data In 03-02-2026 0 0	0	0
	How to integrate Google Cloud armor with splunk? Hi Team,Does anyone know how to integrate Google Cloud armor with splunk? If yes, Kindly guide me!Thanks, by siddiq Loves-to-Learn in Getting Data In 03-02-2026 0 0	0	0
	How to Integrate Iraje PAM with splunk? Is there any possibilities to integrate via syslog? Hi Team,I couldn't find any documentations for integrating Iraje PAM with splunk. Kindly share the integration docume... by siddiq Loves-to-Learn in Getting Data In 03-02-2026 0 0	0	0
	Langfuse integration with Splunk Hi Team,We are exploring ways to integrate Langfuse with Splunk to ingest traces and agent‑level telemetry for monito... by Manish_Sharma Engager in Getting Data In 03-02-2026 0 0	0	0
	Download older version of Splunk Universal Forwarder Hi All,Some months ago, I remember seeing Splunk Universal Forwarder download page for older versions like 6.x , 7.x ... by Poojitha Communicator in Getting Data In 02-27-2026 0 2	0	2
	Splunk Stream /captureipaddresses endpoint returns 404, while /ping works – Setup cannot detect forwarder Environment: Splunk Enterprise single instance on WindowsSplunk App for Stream (v8.1.5) and Splunk Add-on for Stream ... by snick New Member in Getting Data In 02-26-2026 0 0	0	0
	Need help with TCP routing of events from Universal Forwarder Hi all,I'm using Splunk Enterprise 9.4.x with Windows Universal Forwarders.I'm trying to route specific sources and s... by joshuapetitt Path Finder in Getting Data In 02-26-2026 0 2	0	2
	Which apps need the restartSplunkd to be true? We recently realized that the restartSplunkd attribute is more effective when defined at the individual app level rat... by spl_aficionado Path Finder in Getting Data In 02-26-2026 0 2	0	2
	Splunk Add-on for Salesforce Streaming API Connection Login Flow We have a secure instance of Salesforce that mandates SSO and Oauth2. We are trying to set up the Splunk Add-on for S... by Aviation New Member in Getting Data In 02-24-2026 0 0	0	0
	Events not returned in sub-second order I recently started pulling Tenable data in through the Tenable Add-on for Splunk, and when I search the data in Searc... by Jtorge Explorer in Getting Data In 02-24-2026 0 1	0	1
	Avoiding double ingestion I have a RHEL admin who is building two syslog servers to ingest data from one RHEL node redundantly. These two syslo... by Jtorge Explorer in Getting Data In 02-23-2026 0 5	0	5
	Server Class Groups to install this app on What Splunk servers should the installation be on? What components of the app will go into - HF- Cluster Master- Sear... by anmolxmr Explorer in Getting Data In 02-23-2026 0 1	0	1
	Splunk Universal Forwarder Okay, I just want to make sure I understand everything correctly.I'm currently working on a Splunk environment, it cu... by JJ_Splunk New Member in Getting Data In 02-22-2026 0 1	0	1
	Selective Indexing and Parsing in Splunk SIEM – Storing Full Logs but Parsing Only Compliance Fields Hi Team,I’m looking for guidance on designing a Splunk SIEM ingestion strategy for the following scenario:We receive ... by amimulahasun Explorer in Getting Data In 02-22-2026 0 6	0	6
	UF : Prevent ingestion in a wrong index I've an infrastructure where everyone are administrator and therefore can change the universal forwarder configuratio... by Sagittis Explorer in Getting Data In 02-21-2026 0 6	0	6
	How do I FULLY uninstall Splunk Universal Forwarder I'm running Splunk Universal Forwarder with a Splunk Enterprise deployment. On a new install, all information is popu... by cutright_jm New Member in Getting Data In 02-20-2026 0 7	0	7
	How do i index a single file locally on the HF HelloCurrently all data forwarded to our on-prem HF goes to Splunk Cloud, I now have a single file that I want to ind... by tkwaller1 Path Finder in Getting Data In 02-19-2026 0 4	0	4
	splunk data ingestion issue i am uploading the data in the text format and that data contains logs but when i successfully upload the data of par... by harman Explorer in Getting Data In 02-18-2026 0 5	0	5
	Amount of data leaving Splunk Heavy Forwarder I'm trying to measure the amount of data leaving a heavy forwarder (called HVYFWD01).This is in preparation to moving... by eddieddieddie Path Finder in Getting Data In 02-17-2026 0 1	0	1
	help with host override I'm trying to rewrite the host field on events that are coming into a HEC on a HF. It's populating the hostname of t... by ilhwan Path Finder in Getting Data In 02-17-2026 0 8	0	8