Getting Data In

Community Activity

Mupltiple whitelist in inputs.conf Hello,I need to monitor two different types of events for some servers, the authentication events (4624,4634,4625) fo... by marco_massari11 Communicator in Getting Data In 05-06-2024 0 8	0	8
Why am I getting the error"Unable to distribute to peer named X.X.X.X:YYYY at uri=X.X.X.X:YYYY using the uri-scheme=https because peer has status="Down" on my search head for all queries? I am getting the below error on my search head for all the queries. "Unable to distribute to peer named X.X.X.X:PPPP... by pavanae Builder in Getting Data In 05-05-2024 0 5	0	5
Filtering Syslog Inputs before Indexing (to optimize license usage) Hello I am referring to the following documentation Route and filter data - Splunk Documentation I would like to disc... by yh Path Finder in Getting Data In 05-05-2024 0 19	0	19
Splunk Enterprise differences and comparison Hello splunkers!I have a simple question regarding Splunk data models and regular searches, I have found some answers... by splunky_diamond Path Finder in Getting Data In 05-05-2024 0 6	0	6
Why are there duplicated Windows Security Logs? Hi, My problem is duplicated windows security logs. 2 or more log same as each other. why do that ? 03/18/2019 10:... by burakatabay Path Finder in Getting Data In 05-03-2024 1 10	1	10
does not perform log collection We have splunk installed and the collection was happening normally, but for a few days now the collection has stopped... by ArianeSantos New Member in Getting Data In 05-02-2024 0 2	0	2
Running a PowerShell script as admin in Splunk I have a PowerShell script that needs to be ran as admin to be able to load in all of the data. It returns a .csv fil... by jdhart1312 Loves-to-Learn Everything in Getting Data In 05-02-2024 0 2	0	2
Migration of indexer data from default location to new location We want to migrate cluster indexers data from default location that is from (opt/splunk/var/lib/splunk) to customize ... by mshakeb Loves-to-Learn Everything in Getting Data In 05-02-2024 0 3	0	3
HEC event field I need to connect data from a third party application via HEC to Splunk. It sends data in this format 1 event per req... by Haleb Path Finder in Getting Data In 05-02-2024 0 1	0	1
Splunk heavy forwarder vs universal forwarder Hello Splunk community. I have been searching for this question quite a lot and went through many articles, but it’s ... by splunky_diamond Path Finder in Getting Data In 05-01-2024 0 4	0	4
splunkd is not running I'm currently building my own home instance and I'm having some trouble with my UF. So far I've :installed the lates... by Exxnihiloo Engager in Getting Data In 04-30-2024 0 2	0	2
Zulu time Helloi read many topics on zulu time but i m not able to solde onei have a date in this way 2024-04-29T12:01:15.710Z ... by Laurent Explorer in Getting Data In 04-30-2024 0 3	0	3
Splunk ES Email alert and notable events are not getting triggered Hello, Splunk community! I have created a correlation search with the following search string: index="kali2_over_sys... by splunky_diamond Path Finder in Getting Data In 04-29-2024 0 2	0	2
send syslog event to third party server. Linux Hello there, I'm newbie to splunk and need your help please to forward syslog logs coming to splunk to another third ... by sichi New Member in Getting Data In 04-29-2024 0 1	0	1
Max of peak hour volume I need the Max of peak hour volume My Data TimeMakeModel Sold5:03HondaAccord5:07HondaCivic5:08HondaCivic5:10ToyotaC... by th1agarajan Path Finder in Getting Data In 04-29-2024 0 15	0	15
Monitor AD Group Changes? Hi All, Trying to understand how I can get the recent membership changes, query working for Domain Admins group. I w... by andybento New Member in Getting Data In 04-29-2024 0 4	0	4
Missing fields on Splunk data export & import I have one Splunk instance where I ran a search and exported the data in a csv file, xml file, and a raw file. The da... by CSReviews Loves-to-Learn in Getting Data In 04-28-2024 0 2	0	2
Splunk Connect for Syslog I have a sc4s deployment running in an ec2 instance. I followed the documentation provided here https://splunk.github... by matcher123 Loves-to-Learn Everything in Getting Data In 04-28-2024 0 1	0	1
How to send Open Telemetry log signals to Splunk Cloud Hi, Our application uses log4j2 logging framework. We are trying to send log signals created by Otel Logs SDK to Splu... by pp219 Observer in Getting Data In 04-28-2024 0 1	0	1
POST/services/data/inputs/http/httpadmin********8089 I'm running universalforwarder as a service in docker, here is my docker-compose config:services: services: splu... by johnfaldo3 New Member in Getting Data In 04-27-2024 0 2	0	2
Trouble Blacklisting Event Codes My inputs.conf from the deployment server (confirmed that it is being pushed to all hosts correctly): {WinEventLog://... by kymenope Explorer in Getting Data In 04-26-2024 0 2	0	2
event breaking not happening HI SMEs, I am having problem where logs coming from one of the syslog server are getting clubbed into one single raw ... by pm2012 Explorer in Getting Data In 04-26-2024 0 6	0	6
Set regex hostname from file location Hi, I am having troubles with providing the correct regex to extract the hostname from the file location. The file st... by dersa Path Finder in Getting Data In 04-25-2024 0 3	0	3
Search for ip in lookup based on system alias in csv HeloI have a search query like this: index=test dscip=192.168.1.1 OR dscip=192.168.1.2 ...I would like to search this... by Trusty Engager in Getting Data In 04-25-2024 0 2	0	2
Changing setup page does not update the actual page - why? I have changed my appserver/static/javascript directory and the setup page that reffers to it does not update.I tried... by elephant Engager in Getting Data In 04-24-2024 0 0	0	0