Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Join the Conversation
Without signing in, you're just watching from the sidelines. Sign in or Register to connect, share, and be part of the Splunk Community.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Community Activity
 | Hi, we're going to monitor following files on a host with universal forwarder installed: /data/asav/gw1new/log1.gz /... by stwong Communicator in Getting Data In 02-05-2017 0 4 | 0 | 4 | |
| | Hello, In my organization we are planning to use distributed search and index where our requirement is 3Gb data vol... by shahk Explorer in Getting Data In 02-05-2017 0 3 | 0 | 3 | |
| | I have the following stanza in the universal forwarder Splunk 6.3: [WinEventLog://Security] disabled = 0 blacklist1=... by grantsmiley Path Finder in Getting Data In 02-05-2017 0 6 | 0 | 6 | |
| | Hi My input file /tmp/log.txt looks like this. 192.168.22.5 93.x.x.x 456 2 192.168.22.10 183.x.x.x 63 1 src_ip dest... by lakromani Builder in Getting Data In 02-04-2017 0 4 | 0 | 4 | |
| | Under inputs.conf on Universal Forwarder (UF), i have these config as below:- 1.) [monitor:///var/home/jboss/logs/*.... by kteng2024 Path Finder in Getting Data In 02-03-2017 0 2 | 0 | 2 | |
| | Hi, Probably a basic question, but I have tested out manually importing json logs into Splunk using a curl command w... by velocityehs New Member in Getting Data In 02-03-2017 0 1 | 0 | 1 | |
 | Hi, This question is off-topic for Splunk, but please help me out since I need to set up the configuration urgently.... by deepak02 Path Finder in Getting Data In 02-03-2017 0 6 | 0 | 6 | |
| | Hello, I'm trying to import this kind of file : \#DATE TITRE1 TITRE2 TITRE3 #LINE TO IGNORE 20170101 LIGNE1COL1 LI... by strousseau Path Finder in Getting Data In 02-03-2017 0 10 | 0 | 10 | |
| | Hi, I have a scheduled report which runs every midnight over last 30 days data and indexing into summary index. But,... by uhkc777 Explorer in Getting Data In 02-02-2017 0 5 | 0 | 5 | |
 | We have SNMP data being sent from a heavy forwarder to our indexers into an index that we'll call cacti. We want SOM... by hagjos43 Contributor in Getting Data In 02-02-2017 0 2 | 0 | 2 | |
| | Hi, I am trying a POC on my personal PC where Forwarder is on one machine (Linux)Indexer + Search Head on another m... by deepak02 Path Finder in Getting Data In 02-02-2017 0 2 | 0 | 2 | |
| | Bad regex value: '\s+([.-\w]+)\s+RT_FLOW', of param: transforms.conf / [dvc_for_junos_fw] / REGEX; why: invalid range... by Waltersr24 New Member in Getting Data In 02-02-2017 0 2 | 0 | 2 | |
| | I need to get a proper timestamp from raw data that looks like this: Date Of Incident: 12/02/2015 12:00:00 AM, Time ... by tgendron_splunk Splunk Employee  in Getting Data In 02-02-2017 1 7 | 1 | 7 | |
| | In order to filter out non-administrator logon events on WinEventLog:Security sourcetype, I inserted the following st... by fab73 Path Finder in Getting Data In 02-02-2017 0 5 | 0 | 5 | |
 | Hello Team, I have some confusion on calculating maxTotalDataSizeMB for configuring in indexes.conf file. Below are ... by hemendralodhi Contributor in Getting Data In 02-01-2017 0 6 | 0 | 6 | |
| | hi.. in one of my windows server the universal forwarder stopped unexpected. found and restarted the universal forwa... by 82padarthi Explorer in Getting Data In 02-01-2017 0 10 | 0 | 10 | |
| | I have log file that has combination of plain text and key value pairs separated by "|". How can i extract all the fi... by jayakumar89 Explorer in Getting Data In 02-01-2017 0 4 | 0 | 4 | |
| | So... I am attempting to setup a TCP input, which will automatically set metadata, from the event. The _Raw looks li... by ericmck2000 Explorer in Getting Data In 02-01-2017 0 2 | 0 | 2 | |
| | Hi Splunkers, Is there any way to list all the saved searches in Splunk? I want to export the saved searches details... by praveenbandi Explorer in Getting Data In 02-01-2017 1 2 | 1 | 2 | |
| | I have configured monitoring for a set of files. I have configured the props.conf to use the 'last modified' time of ... by aholzer Motivator in Getting Data In 02-01-2017 0 7 | 0 | 7 | |
| | I have rows where data looks like.. Value1^Value2^Value3Value4^Value5Value6Value7^Value8 My query (below)... searc... by ereed18 Engager in Getting Data In 02-01-2017 0 2 | 0 | 2 | |
 | The Error Message on the screen isenter code here: "UniversalForwarder Setup ended prematurely" Versions older tha... by christopherr_sp Splunk Employee in Getting Data In 02-01-2017 4 1 | 4 | 1 | |
 |  Or to restate the question : Why is Splunk Web reflecting the results of the CLI command, but inputs.conf file doesn'... by msutfin1 Explorer in Getting Data In 01-31-2017 1 5 | 1 | 5 | |
| | I have a csv file kept in a central path which is only uploaded once in a day. The moment i search the data on my sea... by simon21 Path Finder in Getting Data In 01-31-2017 0 1 | 0 | 1 | |
 | this is the format: {<!-- --> "epoch": "1485892851.94944", "id": "3952418", "name": "WMI Performance... by dperry Communicator in Getting Data In 01-31-2017 0 3 | 0 | 3 |
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #data-management Slack channel
Get Expert Help at Community Office Hours
Join the #data-management Slack channel
Top Labels
-
administration
14 -
blacklist
92 -
configuration
35 -
CSV
210 -
data
511 -
deployer
1 -
development
6 -
field extraction
565 -
forwarder management
2 -
heavy forwarder
971 -
host
160 -
HTTP Event Collector
449 -
index
548 -
indexer
722 -
indexer clustering
1 -
inputs.conf
847 -
installation
6 -
intermediate forwarder
148 -
JSON
396 -
Linux
464 -
Mac
30 -
modular input
197 -
monitor
314 -
Other
88 -
Platform
1 -
props.conf
998 -
saved search
2 -
scripted input
250 -
search
1 -
search head
2 -
search head clustering
1 -
source
293 -
sourcetype
497 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
syslog
326 -
time
205 -
transforms.conf
587 -
troubleshooting
15 -
universal forwarder
1,584 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
16 -
whitelist
60 -
Windows
600 -
XML
91
- « Previous
- Next »
Get Updates on the Splunk Community!
Forwarder Topology Guidance: Intermediate HF vs Intermediate UF
Why Universal Forwarders Should Not Be Used as Intermediate Forwarders
A practical Splunk forwarding topology ...
At .conf26, Don’t Just See What’s Next. Help Shape It at Innovation Labs.
Long before a new capability reaches the keynote stage, it begins as an idea waiting to be tested. At ...
Data Management Digest – August 2026
Data Management Digest
Welcome to the August 2026 edition of Data Management Digest!
August was a big month ...
Unanswered Topics
