Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
Hi,
I've got a problem with monitoring several log files generated by syslog-ng. There are 50+ switches. I am coll...
by
ikulcsar
Communicator
in
Getting Data In
11-29-2017
|
1
|
4
| ||
|
|
I have a log line logically looking something like this:
f1=a f2=b f3=c custom=[]{ c1{f=x} c2{f=y} c3{f=x}}
I n...
by
dtakacssplunk
Explorer
in
Getting Data In
11-30-2017
|
0
|
3
| ||
|
|
I want to fetch DNS and DHCP logs from my server directly to my local system, where I have my Splunk enterprise, with...
by
singhkrmanish76
New Member
in
Getting Data In
11-30-2017
|
0
|
2
| ||
|
We have a partner who wants an extremely light interface to send data into a Splunk instance. They prefer to make a s...
by
jamesoconnell
Path Finder
in
Getting Data In
12-01-2017
|
1
|
2
| ||
|
|
Hi,
i have a windows environment and universal forwarder installed on the servers and forwarding different type of...
by
carlyleadmin
Contributor
in
Getting Data In
12-01-2017
|
0
|
2
| ||
|
|
I have a master asset list and I need to give them tagging so that when I type something like src_asset_tag=firewall ...
by
rahul_acc_splun
New Member
in
Getting Data In
12-01-2017
|
0
|
1
| ||
|
|
I'm working with Exchange IIS data from our CAS servers and am having trouble with Splunk translating the time from U...
by
asofo
Path Finder
in
Getting Data In
12-01-2017
|
0
|
1
| ||
|
|
Hi,
I have an issue with a sourcetype that logs in UTC/GMT but does not include TZ information, so I would like to...
by
echalex
Builder
in
Getting Data In
09-20-2016
|
0
|
5
| ||
|
|
Need to send certain Windows security and audit files to a RHEL rsyslog server. This is what I have so far (based on ...
by
pil321
Communicator
in
Getting Data In
02-09-2014
|
0
|
7
| ||
|
|
How to change the URL of the Splunk Enterprise shortcut in Windows start menu? I have already updated ports using "sp...
by
gjanardh
Explorer
in
Getting Data In
11-30-2017
|
0
|
1
| ||
|
|
Hi,
We have integrated Mulesoft with splunk and logs are sending to the heavy forwarder and indexing into "Main" i...
by
Swkadam
New Member
in
Getting Data In
11-11-2017
|
0
|
4
| ||
|
Hi,
I am trying to create a new app which will be used to send a Splunk Adaptive response via REST API. I am able ...
by
ramesh_babu71
Path Finder
in
Getting Data In
11-29-2017
|
0
|
3
| ||
|
Every sample log file that I attempt to import as my data source returns the exception:
⚠ cannot concatenate 'str...
by
dweston1
Engager
in
Getting Data In
06-14-2016
|
2
|
3
| ||
|
|
is it possible to store buckets in different drives? this is all windows environment hot buckets on drive D:\ warm bu...
by
lmakonnen_Spear
New Member
in
Getting Data In
11-29-2017
|
0
|
3
| ||
|
|
Hi,
I'm trying to route data to different indexes and sourcetypes based upon hosts coming, but getting errors, and...
by
a212830
Champion
in
Getting Data In
11-29-2017
|
0
|
3
| ||
|
|
Hello, I want to identify the login and logouts for each user on a server. I use the event_id 4624 (logon) and 4634(l...
by
Aufex
Explorer
in
Getting Data In
11-30-2017
|
0
|
2
| ||
|
I have a dns log that is very chatty with internal requests (e.g. localserver5.internal). I would like to forward dns...
by
ejwade
Contributor
in
Getting Data In
11-29-2017
|
0
|
3
| ||
|
|
Hello All,
can any one please help me out in how to index the Task scheduler logs from the windows box..??
Need...
by
RashmiGowda
Explorer
in
Getting Data In
04-29-2015
|
1
|
2
| ||
|
|
[WinEventLog://Security] disabled=0 start_from=oldest current_only=0 evt_resolve_ad_obj=0 checkpointInterval=5 whitel...
by
Kitteh
Path Finder
in
Getting Data In
11-20-2017
|
0
|
9
| ||
|
|
I have an application that uses rolling logging. The rolling logging works as such:
logs are initially written to ...
by
joshuapetitt
Path Finder
in
Getting Data In
11-29-2017
|
0
|
4
| ||
|
I have a tar.gz file and I wan't to continuously monitor it. I tried to index it to Splunk Enterprise via Settings>Da...
by
dantimola
Communicator
in
Getting Data In
11-13-2016
|
0
|
21
| ||
|
|
Hi all,
I am current trying to test persistent queue to see whether it works on heavy forwarder. However, it doesn...
by
xrtan
Explorer
in
Getting Data In
02-11-2016
|
0
|
2
| ||
|
I installed a Splunk Enterprise 7.0 on a Unix machine and wish to get data from a Windows machine (any data would suf...
by
bwouters
Path Finder
in
Getting Data In
11-29-2017
|
0
|
5
| ||
|
|
I am not getting data to my indexer(centos) from fortigate firewall. Port 514 is open but i am unable to telnet. Is t...
by
jibin1988
Path Finder
in
Getting Data In
11-28-2017
|
0
|
1
| ||
|
|
Been trying to mask data before indexing into indexer using heavy forwarders. below is the log sample and data am try...
by
Venkat_16
Contributor
in
Getting Data In
11-27-2017
|
0
|
9
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Top Labels
-
add-on
2 -
administration
11 -
AIX
1 -
audit
1 -
blacklist
90 -
CLI
1 -
configuration
29 -
CSV
205 -
data
445 -
development
5 -
encryption
1 -
eval
2 -
field extraction
538 -
fields
5 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
908 -
host
153 -
HTTP Event Collector
423 -
index
533 -
indexer
689 -
indexing performance
1 -
inputs.conf
816 -
installation
4 -
intermediate forwarder
135 -
introduction
3 -
JSON
381 -
kvstore
1 -
Linux
438 -
login
1 -
Mac
30 -
metadata
1 -
metrics
2 -
modular input
183 -
monitor
305 -
monitoring console
1 -
other
31 -
proactive Splunk component monitoring
2 -
props.conf
946 -
regex
5 -
saved search
2 -
scripted input
238 -
search
1 -
search head
2 -
source
287 -
sourcetype
479 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
305 -
time
203 -
transforms.conf
556 -
troubleshooting
15 -
universal forwarder
1,520 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
14 -
whitelist
60 -
Windows
575 -
XML
90
- « Previous « Previous
- Next » Next »
Get Updates on the Splunk Community!
Leveraging Detections from the Splunk Threat Research Team & Cisco Talos
Now On Demand
Stay ahead of today’s evolving threats with the combined power of the Splunk Threat Research ...
New in Splunk Observability Cloud: Automated Archiving for Unused Metrics
Automated Archival is a new capability within Metrics Management; which is a robust usage & cost optimization ...
Calling All Security Pros: Ready to Race Through Boston?
Hey Splunkers,
.conf25 is heading to Boston and we’re kicking things off with something bold, competitive, and ...
