Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
Hello Everyone,
We are trying to monitor log files on a server using the Splunk universal forwarder. The logs dire...
by
VipulPathak
Explorer
in
Getting Data In
10-22-2015
|
0
|
14
| ||
|
|
I am trying to do a groupby operation at index time on Ironport logs. I have looked in all the documents and posts an...
by
ananthkumar12
Explorer
in
Getting Data In
12-11-2016
|
0
|
4
| ||
|
|
I've configured inputs.conf like below, but I can't see any data. (Other stanzas for [perfmon:// are all working perf...
by
1500372
Explorer
in
Getting Data In
05-24-2016
|
0
|
4
| ||
|
|
Hello all. Apologies in advance if the answer to these questions are documented elsewhere, but I've not been able to ...
by
cbaiocchetti
New Member
in
Getting Data In
12-15-2016
|
0
|
1
| ||
|
|
i want to reduce the number in my indexes by filtering out common Windows events such as 4688 event Id. I thought it ...
by
andy_macn
New Member
in
Getting Data In
12-15-2016
|
0
|
1
| ||
|
I have a couple of hosts that have the same version of Windows (2012 R2) that one will produce perfmon:memory data, a...
by
cpetterborg
SplunkTrust
in
Getting Data In
12-13-2016
|
0
|
3
| ||
|
|
Please excuse me for writing in Japanese.
Splunk Freeで、分散サーチの機能を利用せずに、サーチヘッドとインデクサーを、 それぞれ別のサーバーへ配置することは可能でしょうか？ ま...
by
amemiya
New Member
in
Getting Data In
10-28-2016
|
0
|
2
| ||
|
|
I am kind of new in Splunk and I am curious about something. When I install universal forwarder to a Windows server, ...
by
akif_kayapinar
New Member
in
Getting Data In
12-14-2016
|
0
|
2
| ||
|
|
The logs I've got only have log generation timestamps in them, and the timestamp in Splunk reflects the log generatio...
by
kalik
Explorer
in
Getting Data In
12-14-2016
|
0
|
2
| ||
|
|
We have a fairly large index in an indexer cluster of six indexers. What would be an easy way to remove this index fr...
by
ddrillic
Ultra Champion
in
Getting Data In
12-14-2016
|
0
|
4
| ||
|
|
We wonder whether [monitor:///<source>/logs/*.log] would monitor all log files in the <source>/logs directory and als...
by
ddrillic
Ultra Champion
in
Getting Data In
12-14-2016
|
0
|
2
| ||
|
|
Hello
I have a number of devices logging to an index feeding Splunk via Syslog on 514/UDP. Now, I want to route lo...
by
j666gak
Communicator
in
Getting Data In
03-25-2015
|
2
|
5
| ||
|
|
I have following logs from a customer device:
0080101c40ba,10.10.1.2,1481421584,host1.labtest.com,error-message1,s...
by
jgcsco
Path Finder
in
Getting Data In
12-14-2016
|
1
|
8
| ||
|
|
-health_checkin_date: 2016-10-30T09:45:28.824Z
That is the line from a JSON event being sent into my Splunk insta...
by
joshualarkins
Explorer
in
Getting Data In
12-14-2016
|
1
|
3
| ||
|
We are facing a few issues whereour endpoints (clients) may have the Splunk service stopped. Can we force a restart o...
by
koshyk
Super Champion
in
Getting Data In
12-14-2016
|
0
|
3
| ||
|
This works in the search bar |makemv delim="|", but not when I put that in the props.conf file.
by
Yepeza
Path Finder
in
Getting Data In
12-09-2016
|
1
|
13
| ||
|
|
Hi,
we just set up our first Universal Forwarder which now works as expected. But it didn't do so initially, befor...
by
dwoehr
Explorer
in
Getting Data In
12-14-2016
|
0
|
1
| ||
|
|
Hello, I'm trying to figure out the following setup:
At the moment we have one rotating log file that should be fo...
by
dwoehr
Explorer
in
Getting Data In
12-13-2016
|
0
|
4
| ||
|
|
Hi.
We have recently been inadvertently sending some events to the null queue, due to a new data source that matc...
by
jhigginsmq
Path Finder
in
Getting Data In
12-13-2016
|
0
|
5
| ||
|
|
Hello guys,
I got Cisco firewalls and switches. Now we enabled syslog but I want to see when a port status goes fr...
by
nickbijmoer
Path Finder
in
Getting Data In
12-13-2016
|
0
|
4
| ||
|
I have one forwarder that is showing duplicate on my Splunk server. I updated 3 forwarders to test them. It was from ...
by
TeganDeloitte
New Member
in
Getting Data In
12-13-2016
|
0
|
1
| ||
|
|
I learned that Splunk compresses the incoming data and creates some index files to point towards compressed raw data....
by
ankithreddy777
Contributor
in
Getting Data In
12-12-2016
|
0
|
9
| ||
|
Hi forum,
I'm trying to monitor an xml structured logfile like this:
<Events>
<Event>line1</Events>
<Event>line...
by
schose
Builder
in
Getting Data In
12-13-2016
|
0
|
1
| ||
|
|
Hi users,
I recently installed universal forwarder on a Windows machine, aiming to forward logs from there to the ...
by
evang_26
Communicator
in
Getting Data In
01-30-2015
|
0
|
5
| ||
|
|
I have a requirement to route data that falls within two /24 CIDR ranges to a separate index, say 10.0.1.0/24 and 10....
by
IngloriousSplun
Communicator
in
Getting Data In
03-31-2015
|
0
|
3
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Top Labels
-
add-on
2 -
administration
11 -
AIX
1 -
audit
1 -
blacklist
90 -
CLI
1 -
configuration
29 -
CSV
202 -
data
424 -
development
5 -
encryption
1 -
eval
2 -
field extraction
531 -
fields
4 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
885 -
host
151 -
HTTP Event Collector
418 -
index
524 -
indexer
670 -
indexing performance
1 -
inputs.conf
801 -
installation
4 -
intermediate forwarder
132 -
introduction
3 -
JSON
376 -
kvstore
1 -
Linux
427 -
login
1 -
Mac
29 -
metadata
1 -
metrics
2 -
modular input
179 -
monitor
301 -
monitoring console
1 -
other
15 -
proactive Splunk component monitoring
2 -
props.conf
926 -
regex
5 -
saved search
2 -
scripted input
237 -
search
1 -
search head
2 -
source
279 -
sourcetype
469 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
298 -
time
202 -
transforms.conf
547 -
troubleshooting
15 -
universal forwarder
1,497 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
14 -
whitelist
60 -
Windows
566 -
XML
89
- « Previous « Previous
- Next » Next »
Get Updates on the Splunk Community!
Cultivate Your Career Growth with Fresh Splunk Training
Growth doesn’t just happen—it’s nurtured. Like tending a garden, developing your Splunk skills takes the right ...
Introducing a Smarter Way to Discover Apps on Splunkbase
We’re excited to announce the launch of a foundational enhancement to Splunkbase: App Tiering.
Because we’ve ...
How to Send Splunk Observability Alerts to Webex teams in Minutes
As a Developer Evangelist at Splunk, my team and I are constantly tinkering with technology to explore its ...
