Getting Data In

Community Activity

How to troubleshoot why a file in monitored folder is not being indexed in Splunk Light Free 6.3.0? Hi, I’ve been using Splunk Light Free Version 6.3.0 for about a month on Mac OS X, and it’s been working well, monit... by gbeddow Explorer in Getting Data In 05-08-2017 1 4	1	4
Route event data to different target groups issue Hi Splunkers, here are my 3 configuration files transforms,props,outputs /// props.conf [host:firstClient] TRANSFORM... by belasker New Member in Getting Data In 05-08-2017 0 2	0	2
In my current batch stanza in inputs.conf, why is the file indexed twice? My inputs.conf is as follow: [batch://C:\Splunk\2.txt] index = netiq move_policy = sinkhole sourcetype = shinsei_db_... by xiyangyang Path Finder in Getting Data In 05-07-2017 0 3	0	3
How to assign timestamp for an event from two different fields I have an event like "abcabcabc....abc..timestamp:-2017-05-05T08:08:08.987.....abc...abc.....date:-2017-05-03........ by ankithreddy777 Contributor in Getting Data In 05-07-2017 0 2	0	2
Error on Splunk Universal Forwarder Upgrade Hi everyone, When we upgrade agent (6.0.2 to 6.0.3) we have a WIndows error : "1901 Error attempting to read from the... by nhurtaud Explorer in Getting Data In 05-07-2017 0 3	0	3
How to develop a regular expression that will blacklist my log paths in inputs.conf? Below is my monitoring path [monitor:///wasapps/WAS85/logs/restconnect_alppapp102was85Node01] I want to blacklist ... by ppanchal Path Finder in Getting Data In 05-06-2017 0 4	0	4
How can I create a search via the REST API in a specific app? I am trying to perform a search to modify a lookup csv via the REST API. The simple search \|inputlookup filename.cs... by ericturpin Engager in Getting Data In 05-05-2017 0 3	0	3
CSV file ingestion not respecting column headings I'm trying to monitor a CSV file (via a UF) with column headings included in the file. I want the column headings to... by ericlarsen Path Finder in Getting Data In 05-05-2017 0 6	0	6
Transforms field/value extract not fully working I have a log that has multiple fields and values and each event has a different set of fields and values. To handle t... by pgullette Explorer in Getting Data In 05-05-2017 0 8	0	8
Why is there no data in my summary index? I built a splunk cluster. I created a lot of alerts on the main search server, some alerts I enabled the summary inde... by xsstest Communicator in Getting Data In 05-04-2017 0 3	0	3
Is there a way to write a script to download the latest Splunk version? All, I see there is a "got wget" option on the download page for Splunk, which is great, but that hardcodes me to t... by daniel333 Builder in Getting Data In 05-04-2017 0 2	0	2
Indexes appear in usage report but not in indexes.conf or on indexer I just inherited a stand alone splunk instance and when I run the usage report by indexes, I see a couple of indexes ... by sidekix24 Path Finder in Getting Data In 05-04-2017 0 2	0	2
TimeZone issue I am having issue with some ironport logs with Time zone. The logs are coming in as UTC "2017-05-04T16:05:40+00:00" b... by ssyed2009 New Member in Getting Data In 05-04-2017 0 1	0	1
Batch input for Windows preventing new file creation We want to set up a process that writes an application log to a batch input where Splunk will ingest the file and the... by ebaileytu Communicator in Getting Data In 05-04-2017 0 4	0	4
How to rename host field value based on event data? I have a Linux server that ingests pre-cooked log files. Each line of the log file begins with the host that the log ... by Kieffer87 Communicator in Getting Data In 05-04-2017 0 4	0	4
LDAP by SSL using WIndows 2012R2 cannot connect to Active Directory server Trying to use LDAP with SSL and running into issue 'Can't contact LDAP server'. Looked on Splunk Answers and saw sim... by ewienholt Explorer in Getting Data In 05-04-2017 1 4	1	4
Parse JSON series data into a chart I'm trying to parse the following JSON data into a timechart "by label". The "data" section is a timestamp and a val... by jercra Explorer in Getting Data In 05-04-2017 0 2	0	2
What happened if universal forwarder is pointed to a new Deployment server? Hello, Situation: - Universal forwarder pointed to a temp Deployment server - Two applications are deployed on the U... by AlesFrohlich Explorer in Getting Data In 05-04-2017 0 1	0	1
Search query to check 50-100 forwarders phoning home status from thousands of forwarders. Hi, We have thousands of forwarders installed. Our requirement is to check status of only 50-100 forwarders from tho... by onkarkore1 Explorer in Getting Data In 05-04-2017 0 13	0	13
SPlunk API How grant required access & end point information for accessing the Splunk API? Please help us how we can grant acce... by sahils New Member in Getting Data In 05-04-2017 0 1	0	1
How to filter search result based on case condition Hi guys, I'm new to splunk and I have one issue with filtering my search results based on a case condition My search ... by andreigro New Member in Getting Data In 05-04-2017 0 3	0	3
Regex in summary index Hi, I have a lot of searches like this: Search 1: \| common regex \| stats using some fields extracted in regex Sea... by namrithadeepak Path Finder in Getting Data In 05-03-2017 0 2	0	2
Parsing XML log files Hi, I would to like to index a log in xml format and I would to like to parse it so that the content of each event w... by monteirolopes Communicator in Getting Data In 05-03-2017 0 1	0	1
Splunk server not recieving data from node I have a splunk enterprise server and a node configured with Linux forwarder. These are the things configured in both... by vysakhnubelity New Member in Getting Data In 05-03-2017 0 2	0	2
Windows events: Why no data in the "Message" field? I have a heavy forwarder on a win2008R2 server. Windows security logs are being written to a file on that forwarder a... by Bill_B Communicator in Getting Data In 05-03-2017 0 10	0	10