Getting Data In

Community Activity

What does splunk-parameter "--auto-ports"do? This parameter is used in auto-install-scripts for the Universal Forwarder but I could not find any information about... by rvany Communicator in Getting Data In 07-21-2017 1 5	1	5
Extract values for fields with the same name, but specifics come after value. I'm using splunk to search my Cisco ISE logs. There is an ISE app, which is great, but has a pretty significant probl... by sanorthrup Path Finder in Getting Data In 07-21-2017 0 1	0	1
How can I tell if a heavy forwarder or universal forwarder was installed on a box? I have a box that I didn't install that has a forwarder on it, but I'm not certain whether it's a Heavy Forwarder or ... by proletariat99 Communicator in Getting Data In 07-21-2017 1 7	1	7
What are consideration when integrating with ServiceNow Please advise on the best practices for ServiceNow integration. How to integrate and enable auto ticket creation. by kalaicompforens Engager in Getting Data In 07-21-2017 0 2	0	2
About distributed search. In my environment, I have two indexers for one Search head. I think that these commands like "search", "dedup", "tra... by yutaka1005 Builder in Getting Data In 07-21-2017 0 7	0	7
Can an intermediate Heavy Forwarder forward data to a third party system without indexing? Can I forward data from the universal forwarders using an intermediate heavy weight forwarder to a third-party system... by disgruntled2704 Engager in Getting Data In 07-20-2017 1 2	1	2
Structured data (TSV) configured on UNiversal Forwarder with Transform applied on Indexer I have some TSV files that I am forwarding with a Universal Forwarder. I have props.conf configured on the UF with th... by gn694 Communicator in Getting Data In 07-20-2017 0 2	0	2
How to collect logs from a DC with a Splunk Universal Forwarder and with a 3rd party WMI at the same time? Hi, Our customer has several DC (Domain Controllers). They already collect logs from DC using SyslogNG Agent over WM... by ikulcsar Communicator in Getting Data In 07-20-2017 0 1	0	1
Splunk Monitor Stazas Hi Team, We have a distributed environment with several forwarders managed by Deployment Server. Recently, I have co... by siva_cg Path Finder in Getting Data In 07-20-2017 0 3	0	3
REST API is not shown in Data Inputs I am really trying to follow this link (below) for getting a twitter feed into Splunk: https://discoveredintelligence... by sklise New Member in Getting Data In 07-20-2017 0 2	0	2
connection refused: What may be the root cause? Hi, I am getting Connection refused error, for one of the host. Is it because of firewall issue's? . Please guide ... by rohithshetty New Member in Getting Data In 07-20-2017 0 2	0	2
CSV Headers appearing as events My events are appearing on Splunk and the fields are getting extracted however the header is appearing as an event ev... by tc641 New Member in Getting Data In 07-20-2017 0 2	0	2
duplicated events when monitoring from log file Hi, I have a script that pulls oracle events and write them to a file called ora.log.The script runs at 5 min interv... by remy06 Contributor in Getting Data In 07-20-2017 1 9	1	9
How can I filter windows XML event logs? I have the following inputs.conf stanza: [WinEventLog://Security] disabled = 0 start_from = oldest current_only = 0 ... by nembela Path Finder in Getting Data In 07-20-2017 0 1	0	1
CSV and TSV File Inputs on Universal Forwarder - Do I need to configure both INDEXED_EXTRACTIONS and FIELD_DELIMITER? I am going to be forwarding CSV and TSV files, and was wondering if I need to configure both INDEXED_EXTRACTIONS and ... by gn694 Communicator in Getting Data In 07-19-2017 1 8	1	8
How do I prevent indexing duplicate data with CLONE_SOURCETYPE and_SYSLOG_ROUTING in transforms.conf? Hello, I am experiencing unexpected behavior with the CLONE_SOURCETYPE attribute in transforms. When I use CLONE_SO... by blouder Explorer in Getting Data In 07-19-2017 2 4	2	4
index esxi logs on central syslog-ng/splunk host Hi there we're running a central syslog-ng host where we collect all logs relevant to us. usually delivered by syslo... by mettlers Engager in Getting Data In 07-19-2017 1 3	1	3
How to get HTTP Event Collectors enabled in Splunk Cloud? We are investigating Splunk Cloud for our browser apps performance and logging. To see if the HTTP Event Collectors ... by jimathead Engager in Getting Data In 07-19-2017 1 7	1	7
How to index a simple dir in Windows Environment Hi guys. A simple question (i hope  ). I need to index in a single event this very very simple Windows .cmd output, ... by verbal_666 Builder in Getting Data In 07-19-2017 0 4	0	4
Coalesce and CIM Compliant Fields Hello, From a reporting perspective, I have apache logs in a company standard format. Due to load balancing configur... by BP9906 Builder in Getting Data In 07-19-2017 0 9	0	9
Tagging data from different sources that will send to same forwarder... Hello All: Greetings. First of all, thanks for take your time and read this question; apologies by my poor English. ... by rjlaral New Member in Getting Data In 07-19-2017 0 4	0	4
SYN_RECV network message in intermediate forwarder Hi, I'v configured a intermediate forwarder and enable the 9997 port to listen the other assets. Testing the connec... by wvalente Explorer in Getting Data In 07-19-2017 0 1	0	1
Single field needs formatting Hello, I am wondering is there a way to format a single field into JSON format. I have an error alert that returns ... by zeroCalm New Member in Getting Data In 07-18-2017 0 1	0	1
Is there a way to search for internal to external traffic? Is there a way to search for internal to external traffic? The network I work on is pretty locked down and any inter... by bezotic New Member in Getting Data In 07-18-2017 0 2	0	2
Apply field extraction to source field Hi, I need to extract a few fields from the 'source' field. I do not have access to props.conf. Is there anyway of... by namrithadeepak Path Finder in Getting Data In 07-18-2017 0 8	0	8