Getting Data In

Community Activity

Splunk forwarders failing to send some of the Windows application Event logs for some devices Why are Splunk forwarders failing to send some of the Windows application Event logs for some devices? We are using S... by Gayathirikuppus New Member in Getting Data In 03-20-2018 0 3	0	3
Why am I getting this error on the Universal Forwarder "Parameters must be in the form '-parameter value'"? Getting the above error when running the following command splunk install app C:\Program Files\SplunkUniversalForwar... by ykorkovelos Engager in Getting Data In 03-20-2018 0 2	0	2
spkunk forwarder runit configuration in Our organisation we are using runit as the service manager. What is the config for the run.sh in runit so that we... by venkatsudharsan New Member in Getting Data In 03-20-2018 0 0	0	0
Unable to install splunk forwarder on SOLARIS SPARC hi, I am trying to install splunk forwarder solaris package but getting checksum error and not able to untar it. Pac... by kollampalli Engager in Getting Data In 03-20-2018 0 4	0	4
why are props.conf keys not recognized I have a verry strange behaviour in props.conf, the following stanza does not work: [SDCS-liveclone-xxxxxx-st_XmlWin... by FritzWittwer_ol Contributor in Getting Data In 03-20-2018 0 8	0	8
Is it possible to make Splunk Inputs in automated way? Hi All! Currently we have some add-ons for tools like Jenkins, GitLab, SonarQube in our instance and we have configu... by edgarsmielavs New Member in Getting Data In 03-20-2018 0 2	0	2
Universal Forwarder 6.4.0 to HEC Unfortunately, I have a few hundred hosts running 6.4 universal forwarder and I cannot upgrade them. I have a subset ... by acamilo_2 New Member in Getting Data In 03-19-2018 0 1	0	1
Any idea why I cam getting global config errors in my HEC config? All, I have the following inputs.conf on a clean install of Splunk. But when I restart the instance I get a message... by daniel333 Builder in Getting Data In 03-19-2018 0 1	0	1
Has anyone seen a log file with this >> 155357.370:97 at the beginning of it. Has anyone seen a log file that contains this type of numerical value at the beginning of it? It does not appear to ... by P2764711 New Member in Getting Data In 03-19-2018 0 0	0	0
Cannot receive WinEventLog via inputs.conf My current setup: Splunk Indexer (Deployment Server)Domain Controller (Windows Server 2008) - UF installed as Deploy... by johant Explorer in Getting Data In 03-19-2018 0 10	0	10
How to get JSON fields to show up in the 'interesting fields' list in a search? I have json being input to Splunk and the JSON is being parsed ok. At least the events show up with collapsed fields... by scottj1y Path Finder in Getting Data In 03-19-2018 0 2	0	2
SEDCMD help with Windows DNS logs I am trying to use the SEDCMD when indexing Windows DNS logs as described in this solution: http://splunk-base.splunk... by chemc Engager in Getting Data In 03-19-2018 2 4	2	4
How to extract sub-element data from a JSON message: In the event below, i want to extract from MessageBody, the subdata under Request like businessId, partnerEBID and also some fields from the Response section like branchCode {<!-- --> cid: abcde d: 1211 environment: nonProd log: request messageBody: } by besa0903 New Member in Getting Data In 03-19-2018 0 2	0	2
How to use indexer master as listener for data, but actual data will be stored on slaves? Hello, How to use indexer master as listener for data, but actual data will be stored on slaves? Is possible to forwa... by Rialf1959 Explorer in Getting Data In 03-19-2018 0 5	0	5
How to use time input in another input search Hi I have a dashboard with 2 input - time and another field ('fieldA'). 'fieldA' is populated by a search, and it ha... by matansocher Contributor in Getting Data In 03-19-2018 2 1	2	1
Automatically detect new windows hosts for WMI data collection? Our company has a cloud. For the cloud VMs we don't want to install Splunk Agents on every new VM and therefore we wo... by wilhelmF Path Finder in Getting Data In 03-19-2018 0 1	0	1
Can we get data from API in Splunk App on demand and without indexing it? Hi, Would it be possible to get data from an external RESTful API and draw the JSON results with Splunk element as ch... by wazuhtest Explorer in Getting Data In 03-19-2018 0 5	0	5
How to repack the installation package MSI for Splunk universal forwarder? Hey guys Is it possible to rebuild msi installation package for Splunk Forwarder? I want to assemble my installation... by Aleksey_18 New Member in Getting Data In 03-19-2018 0 3	0	3
I need a query that shows how much data is being logged into Splunk by each hosts in every hour The reason i need this query is, last month and few days ago we passed our license usage because one server alone gen... by loureni1 Explorer in Getting Data In 03-18-2018 0 7	0	7
In the netflow streaming app, why am I unable to see the netflow data? Hi There, I've configured the stream app and streamfwd.log as follow: netflowReceiver.0.ip = 192.168.1.2 netflowRece... by heskez Engager in Getting Data In 03-18-2018 0 2	0	2
How to troubleshoot this error when running the validate cluster-bundle"Archiver Failure - Failed to create archive file"? Upon running the validate cluster-bundle command we get the following error, how to troubleshoot this? As in another ... by mcraig88 New Member in Getting Data In 03-18-2018 0 1	0	1
logging all linux logs to syslogs ng for heavy forwarder Hello All, I need to send all the LOG files from the client on to the server which is running syslog NG. now whats w... by ranjitbrhm1 Communicator in Getting Data In 03-16-2018 0 5	0	5
Ideal indexes.conf Hi, Can I please know the ideal configurations for indexes.conf ? Should we include parameters like homePath.maxD... by nawazns5038 Builder in Getting Data In 03-16-2018 0 8	0	8
Indexing a csv file via the forwarder When we index a csv file via the forwarder we see the following - Why don't we see separate events? by ddrillic Ultra Champion in Getting Data In 03-16-2018 0 3	0	3
Can we have same field extraction for the same sourcetype in 2 different apps? Hi Team, Can we have same field extraction for the same sourcetype in 2 different apps? If I already have a Field Ex... by newbie2tech Communicator in Getting Data In 03-16-2018 0 2	0	2