Getting Data In

Community Activity

	Migration of indexer data from default location to new location We want to migrate cluster indexers data from default location that is from (opt/splunk/var/lib/splunk) to customize ... by mshakeb Loves-to-Learn Everything in Getting Data In 05-02-2024 0 3	0	3
	HEC event field I need to connect data from a third party application via HEC to Splunk. It sends data in this format 1 event per req... by Haleb Path Finder in Getting Data In 05-02-2024 0 1	0	1
	Splunk heavy forwarder vs universal forwarder Hello Splunk community. I have been searching for this question quite a lot and went through many articles, but it’s ... by splunky_diamond Path Finder in Getting Data In 05-01-2024 0 4	0	4
	splunkd is not running I'm currently building my own home instance and I'm having some trouble with my UF. So far I've :installed the lates... by Exxnihiloo Engager in Getting Data In 04-30-2024 0 2	0	2
	Zulu time Helloi read many topics on zulu time but i m not able to solde onei have a date in this way 2024-04-29T12:01:15.710Z ... by Laurent Explorer in Getting Data In 04-30-2024 0 3	0	3
	Splunk ES Email alert and notable events are not getting triggered Hello, Splunk community! I have created a correlation search with the following search string: index="kali2_over_sys... by splunky_diamond Path Finder in Getting Data In 04-29-2024 0 2	0	2
	send syslog event to third party server. Linux Hello there, I'm newbie to splunk and need your help please to forward syslog logs coming to splunk to another third ... by sichi New Member in Getting Data In 04-29-2024 0 1	0	1
	Max of peak hour volume I need the Max of peak hour volume My Data TimeMakeModel Sold5:03HondaAccord5:07HondaCivic5:08HondaCivic5:10ToyotaC... by th1agarajan Path Finder in Getting Data In 04-29-2024 0 15	0	15
	Monitor AD Group Changes? Hi All, Trying to understand how I can get the recent membership changes, query working for Domain Admins group. I w... by andybento New Member in Getting Data In 04-29-2024 0 4	0	4
	Missing fields on Splunk data export & import I have one Splunk instance where I ran a search and exported the data in a csv file, xml file, and a raw file. The da... by CSReviews Loves-to-Learn in Getting Data In 04-28-2024 0 2	0	2
	Splunk Connect for Syslog I have a sc4s deployment running in an ec2 instance. I followed the documentation provided here https://splunk.github... by matcher123 Loves-to-Learn Everything in Getting Data In 04-28-2024 0 1	0	1
	How to send Open Telemetry log signals to Splunk Cloud Hi, Our application uses log4j2 logging framework. We are trying to send log signals created by Otel Logs SDK to Splu... by pp219 Observer in Getting Data In 04-28-2024 0 1	0	1
	POST/services/data/inputs/http/httpadmin********8089 I'm running universalforwarder as a service in docker, here is my docker-compose config:services: services: splu... by johnfaldo3 New Member in Getting Data In 04-27-2024 0 2	0	2
	Trouble Blacklisting Event Codes My inputs.conf from the deployment server (confirmed that it is being pushed to all hosts correctly): {WinEventLog://... by kymenope Explorer in Getting Data In 04-26-2024 0 2	0	2
	event breaking not happening HI SMEs, I am having problem where logs coming from one of the syslog server are getting clubbed into one single raw ... by pm2012 Explorer in Getting Data In 04-26-2024 0 6	0	6
	Set regex hostname from file location Hi, I am having troubles with providing the correct regex to extract the hostname from the file location. The file st... by dersa Path Finder in Getting Data In 04-25-2024 0 3	0	3
	Search for ip in lookup based on system alias in csv HeloI have a search query like this: index=test dscip=192.168.1.1 OR dscip=192.168.1.2 ...I would like to search this... by Trusty Engager in Getting Data In 04-25-2024 0 2	0	2
	Changing setup page does not update the actual page - why? I have changed my appserver/static/javascript directory and the setup page that reffers to it does not update.I tried... by elephant Engager in Getting Data In 04-24-2024 0 0	0	0
	10-26-2013 16:39:13.343 +0100 WARN TcpOutputFd - Connect to 192.168.x.x:9997 failed. No connection could be made because the target machine actively refused it. I'm struggling to get Exchange Universal Forwarders to connect to the central instance. This is the error in the spl... by russellrobertso Engager in Getting Data In 04-24-2024 0 6	0	6
	Indexed Data I made my configuration for inputs.conf to ingest data into splunk but not getting data, during my investigation to c... by whitecat001 Explorer in Getting Data In 04-24-2024 0 1	0	1
	Sub Search - how do I compare a search event to an index, only displaying the table of events not found in index? I have created a search that contains a field that is unique. I am using this search to populate the index. however ... by manta0101 Engager in Getting Data In 04-24-2024 0 2	0	2
	AWS GuardDuty Logs to Splunk Cloud Hi Team, We actually want to send AWS Guard Duty logs to Splunk Cloud so what is the procedure to get it achieved sin... by anandhalagaras1 Contributor in Getting Data In 04-24-2024 0 1	0	1
	Lost events in index Hi All,We have a strange problem here.On a Linux syslog server, the logs from different systems are each saved as a f... by pichertklaus Explorer in Getting Data In 04-24-2024 0 10	0	10
	Transforms.conf devid Hello,We are encountering a problem with the parsing on the fortigate add-on.It does not recognize the devid of our e... by tel Engager in Getting Data In 04-24-2024 0 1	0	1
	How to pull data from elasticsearch to Phantom? I have elasticsearch database installed on one server. I am trying to pull data from elasticsearch to phantom SOAR. C... by amol New Member in Getting Data In 04-23-2024 0 1	0	1