Getting Data In

Community Activity

	How can I use a CSV of email addresses to search indexed data? Hi everyone, I'm having a little trouble querying with a CSV and wondered if you could provide assistance. I have a... by swright95 New Member in Getting Data In 09-13-2017 0 1	0	1
	Where does props.conf need to exist in a distributed deployment? I think I need to push this from the deployment to each device or at least the forwarder and search head. I have 5 s... by pfabrizi Path Finder in Getting Data In 09-13-2017 0 2	0	2
	Are there any apps for Apache and/or Tomcat? Hi Guys,looking for any app that deals with Tomcat and Apache. by Kirantcs Path Finder in Getting Data In 09-13-2017 0 4	0	4
	Log that has wildly different times, but Splunk thinks it is a single event It recognizes the datetime correctly based on the first line, but it seems to randomly be grouping up lines. Example... by benchen421 New Member in Getting Data In 09-13-2017 0 3	0	3
	Issue with specifying sourceype when logging data from multiple servers While ingesting the data all the logs from the server are falling into single source type. Can any one suggest me how... by srividyareddy New Member in Getting Data In 09-13-2017 0 2	0	2
	Start Splunk using batch file Hi all, I want splunk start using batch script ,when splunk is stopped.. I tried like this .. when splunk status is s... by harishalipaka Motivator in Getting Data In 09-13-2017 0 2	0	2
	DMC and dual purpose Splunk server I have an indexer and universal forwarder on the same server. The reason for this is that the connection from the in... by pwilliams_splun Splunk Employee in Getting Data In 09-13-2017 0 1	0	1
	Data being auto-indexed as .tmp file instead of .csv Hello, I have an auto-index set up on a folder in my splunk directory and the past two times when a user copied thei... by katzr Path Finder in Getting Data In 09-12-2017 0 5	0	5
	WinEventLogs breaking the field extractions when sent to a third-party. Why? Im able to Send the WinEventlogs to third party server through SYSLOG TCP port. But the props which i have created is... by cleelakrishna Loves-to-Learn in Getting Data In 09-12-2017 0 1	0	1
	how to add a column "seen in last 24 hours" to my current report and verify the list of hosts from the csv file were reporting into splunk from last 24 hours or not? I have a query which contains multiple csv files as lookup tables and their result contains list of hosts and their d... by pavanae Builder in Getting Data In 09-12-2017 0 12	0	12
	Anonymize Data in Splunk Search Hey, I am running a local instance of splunk for testing purposes. The aim is toAnonymize certain parts of the data t... by jmaguire1992 Explorer in Getting Data In 09-12-2017 0 5	0	5
	In selective indexing with defaultGroup=noforward, do I have to worry about adding _INDEX_AND_FORWARD_ROUTING to Splunk default inputs also? I'm reading the section Index one input locally and then forward all inputs in Route and Filter data where selectiveI... by wrangler2x Motivator in Getting Data In 09-12-2017 0 6	0	6
	How to combine different types of events from different data sources into one event? Hello I have three different data sources (so 3 different types of events) DataSource_1: Event_Number Ticket DataS... by akawacz Path Finder in Getting Data In 09-11-2017 0 8	0	8
	How can I filter a transaction that contains multiple matches - and force a numeric sort? I have used the 'transaction' command to isolate transactions that are made up of roughly 45 events each. I have a r... by jasongb Path Finder in Getting Data In 09-11-2017 0 3	0	3
	Does Splunk provide fully supported Docker universal forwarder ? We are looking at using the Docker Universal Forwarder for logging forwarding from the official GitHub Splunk reposit... by splunkmachine Explorer in Getting Data In 09-11-2017 0 5	0	5
	Splunk not detecting local files recursively. I am I have a couple hundred log files I pulled from client computers using powershell. I am experimenting with havi... by millarma Path Finder in Getting Data In 09-11-2017 0 6	0	6
	Splunk is ingesting archive files of syslog data that has already been ingested. our setup 2 SH, 1 deployment server, 1 license server and 2 indexers , our two indexers are also syslog servers and t... by hrithiktej Communicator in Getting Data In 09-11-2017 0 8	0	8
	Why do I get errors for index=__ALL__ when using \| delete? When deleting via index=xxx sourcetype=yyyy \| delete I got the following page - So, in addition to the proper inde... by ddrillic Ultra Champion in Getting Data In 09-10-2017 0 5	0	5
	Should I "normalize" data prior to indexing? I have the opportunity to pull in some ticket system data and create some statistics / visualizations. The data consi... by msutfin1 Explorer in Getting Data In 09-10-2017 0 6	0	6
	Splunk - Adjusting source file timestamp Given: I have two log files (file_1, file_2) Each from a different server (server_1, server_2). The servers are not p... by nageshkumarapp New Member in Getting Data In 09-10-2017 0 3	0	3
	How to monitor a specific Windows Application EventCode? I'm trying to monitor a specific Windows Application EventCode (via a whitelist), yet the events are not being sent t... by ericlarsen Path Finder in Getting Data In 09-09-2017 0 8	0	8
	Hard disk requirement for Splunk heavy forwarder Can you please share the hard disk requirement for Splunk enterprise and Splunk heavy forwarder by Monica7 New Member in Getting Data In 09-09-2017 0 4	0	4
	Event Count keeps increasing when monitoring CSV file I have configured a CSV file path using Monitor files and directories option in the Add Data feature. That CSV file h... by tskarthic New Member in Getting Data In 09-09-2017 0 7	0	7
	Half event to index queue and half event to null queue Hi All, Is there a possibility to send half of the event to index queue and half of the event to null queue?? Can t... by bharathkumarnec Contributor in Getting Data In 09-09-2017 0 6	0	6
	How to configure Splunk to collect nmon data and shows analysed reports in AIX? I have installed splunk-6.2.13-278211-AIX-powerpc version and now wanted to configure Splunk in such way that it shou... by Navanath New Member in Getting Data In 09-09-2017 0 2	0	2