Getting Data In

Community Activity

collect command wouldn't save to an index i have a search in my query where i spool data from an API but then the collect command does not allow me to save the... by sintjm Path Finder in Getting Data In 07-12-2024 0 15	0	15
Ingest Sciencelogic metrics into Splunk I am unable to find and add-on or app in Splunkbase for getting ScienceLogic events into Splunk. Does anybody have a... by kcarsten Engager in Getting Data In 07-11-2024 0 1	0	1
How to configure a Splunk Universal Forwarder to send specific Windows logs to a designated index Hello,I have successfully configured the Splunk Universal Forwarder on a Windows machine to send WinEventLog: System,... by BRFZ Communicator in Getting Data In 07-11-2024 0 3	0	3
Linux Event logs not coming over to Splunk cloud I am trying to ingest Linux logs into Splunk. 1. I have deployed the unix_TA through the deployment server to the Hea... by Kwabena13 Engager in Getting Data In 07-11-2024 0 6	0	6
Indexer Discovery Error (IndexerDiscoveryHeartbeatThread) Hi, I have Splunk 8.0.0 on AWS with a clustered indexer set up (1 Master and 4 indexers) and I have deployed custom ... by amitjaywantsplu Engager in Getting Data In 07-11-2024 1 3	1	3
Sourcetype is visible, but not searchable after rename in transforms I have this most wired situation, where I use inputs.conf on the UF: [monitor://C:\Users\xxx\OneDrive - xxx\xxx\Sou... by BTrust Path Finder in Getting Data In 07-11-2024 0 3	0	3
Log data separation according to host IP address Our scenario in new deployment:One indexer server (Windows) (+one separate Windows server as search head)One SC4S in ... by Sepe New Member in Getting Data In 07-11-2024 0 1	0	1
Running as non-root and still able to read root logs Bit of a reverse error here, splunk is working when it shouldn't.I followed these instructions to run Splunk as non-r... by BlueQ Explorer in Getting Data In 07-10-2024 0 6	0	6
Epoch time stamp delemma - how do I convert the epoch time stamp upon ingestion ? Is there a Regex to convert the epoch to human readable time upon ingestion ? [1720450799] Error: Got check result f... by jcorcorans Explorer in Getting Data In 07-10-2024 0 4	0	4
High memory/cpu usage by splunk universal forwarder I've installed Splunk Universal Forwarder 9.1.0 on a Linux server and configured batch mode for data log file monitor... by NReddy12 Loves-to-Learn Lots in Getting Data In 07-10-2024 0 4	0	4
how to brake my lines and treat my multiple events as multiple events Hi all, I am monitoring a CSV file that has multiple lines and using a pipe as the delimiter: I want to brake them to... by maxruas Loves-to-Learn Lots in Getting Data In 07-10-2024 0 1	0	1
Timestmap extraction for multiple events in single sourcetype Hi folks,I have a use case where I am having different types of events in a single sourcetype. I want to apply differ... by darshm New Member in Getting Data In 07-10-2024 0 3	0	3
How can i assign a value to a variable in a splunk Hello everyone, I am looking for a way to assign values to variables in order to avoid repetition in my query. I want... by Med_Ryad Engager in Getting Data In 07-10-2024 0 4	0	4
Cisco err-disable error I have a cisco ess -3300 con switch with 20 1G copper port and 4 1G Fiber cable .My issue is that out of 24 1G port o... by Manjunatha New Member in Getting Data In 07-09-2024 0 1	0	1
Setup screen with credentials and multiple endpoints I am trying to create a setup screen for my app that will store passwords securely and also create a scripted input i... by andrew_garvin Path Finder in Getting Data In 07-08-2024 4 4	4	4
Splunk Add on for Microsoft Azure Secure Score- How to resolve this error? Hi, I am working with the Splunk Add on for Microsoft Azure and im trying to get the Secure Score working with it, h... by paulmachin New Member in Getting Data In 07-08-2024 0 2	0	2
Search for client disconnects from Indexer? Is there a way to monitor disconnects on a host (with a deployed universal forwarder) that cannot reach the Indexer? ... by splunktrainingu Communicator in Getting Data In 07-08-2024 0 5	0	5
Sequence of activities at index time Hi at all,I have a new doubt about the sequence of activities during indextime.I have a data flow, arriving from HEC ... by gcusello SplunkTrust in Getting Data In 07-07-2024 0 4	0	4
Filtering logs not working as expected I have tried to solve this problem with all the combinations, but missing some key thing on how to resolve.I have var... by vimselva Explorer in Getting Data In 07-07-2024 0 6	0	6
Splunk DBConnect with Informix Hello,Anyone has experience configuring Splunk DBconnect with informix database? Do we need to install the drivers e... by Roy_9 Motivator in Getting Data In 07-07-2024 0 1	0	1
Language for collecting logs Hello, I want to collect logs from a machine that is set to French. Consequently, the logs are generated in French, m... by BRFZ Communicator in Getting Data In 07-06-2024 0 2	0	2
Help with Windows Print Server admin log The print server OS is Windows Server 2019 I would like to get PrintService-Admin log to Splunk.I tried the following... by tomtom0030 Loves-to-Learn in Getting Data In 07-06-2024 0 1	0	1
Getting Data into the Splunk Add-On for Microsoft Security Hi folks,I am trying to get Defender logs into the Splunk Add-On for Microsoft Security but I am struggling a bit.It... by qzy Observer in Getting Data In 07-04-2024 0 2	0	2
Resource/guide sought for ProofPoint TRAP [ThreatResponse] integration with Splunk Hello Team , we have requirement to integrete the proofpoint threat response [ TRAP] appliance logs within splunk. i... by SunilMaharishi Path Finder in Getting Data In 07-03-2024 1 11	1	11
Syslog is Creating Duplicates, Prevent Splunk from ingesting duplicates Hi All, I recently found out that my Syslog Server is creating duplicates for all log files.I checked the packets ´pc... by krutika_ag Path Finder in Getting Data In 07-03-2024 0 1	0	1