| Hello , We have problem with Splunk forwarder usage. Will limiting the maxkbps=0 increase the speed of CPU usage an... by Kaushikkatta03 Explorer in Getting Data In 08-01-2016 0 1 | 0 | 1 | ||
| Hi all Since I'm quite new at this, I was wondering is it possible (on Windows) to generate props.conf and transform... by Wayoutwilly New Member in Getting Data In 08-01-2016 0 2 | 0 | 2 | ||
| Hello, Based on Splunk recommendation the best path for this file"props.conf" is: $SPLUNK_HOME/etc/system/local If... by sspomeplus New Member in Getting Data In 08-01-2016 0 2 | 0 | 2 | ||
| I have been given a log file to ingest into Splunk as part of a Lab exercise, but Splunk it not extracting the time a... by dshakespeare_sp Splunk Employee 0 4 | 0 | 4 | ||
| Hello, I am new to Splunk and was recently given our organization's old Splunk project. Long story, but basically it... by mhuntington Explorer in Getting Data In 07-31-2016 0 1 | 0 | 1 | ||
| Hi I need to collect all Windows security logs from my infrastructure with Splunk UF installed which include specifi... by ArsenyKapralov Path Finder in Getting Data In 07-31-2016 0 4 | 0 | 4 | ||
| Hello, As I've said in a previous post, I am new to Splunk so please excuse the newb questions. I have been tasked ... by mhuntington Explorer in Getting Data In 07-31-2016 0 2 | 0 | 2 | ||
| Has anyone run into this before? I'm unable to rotate logs due to files being opened by the forwarder. The files ha... by mcrawford44 Communicator in Getting Data In 07-30-2016 0 4 | 0 | 4 | ||
| Hello, I am missing data in my current setup (about 20 to 30%). Instance A is sending data to Instance B on port 51... by Arkon Explorer in Getting Data In 07-29-2016 0 7 | 0 | 7 | ||
| Hello. Does anyone have experience with what is reflected in the subject question (Journalctl logs)? I must copy t... by templier Communicator in Getting Data In 07-29-2016 1 3 | 1 | 3 | ||
| Hi, I get the following error when I restart our universal forwarder for AIX, 05-24-2016 18:06:26.872 +0800 INFO ... by akdake Explorer in Getting Data In 07-28-2016 0 1 | 0 | 1 | ||
| I created a new index (test_summary) in the Indexer for storing summary data. Then I created a new report in Search ... by jagadeeshm Contributor in Getting Data In 07-28-2016 2 16 | 2 | 16 | ||
| I'm writing transforms.conf and props.conf in /splunk/home/etc/system/local to parse events before a certain string(... by jenniferleenyc Engager in Getting Data In 07-28-2016 0 3 | 0 | 3 | ||
| Hello All our logging events start with a time stamp that looks like this: 00:00:23,746 The data in between the eve... by cj039165 New Member in Getting Data In 07-28-2016 0 8 | 0 | 8 | ||
| Hello, We recently started to notice that a file that used to be monitored fine is no longer being pulled into splun... by aaronkorn Splunk Employee 3 1 | 3 | 1 | ||
| Hi Guys, I do a data Input from a folder. The folder contains CSV files. Splunk imports all the data in a correct wa... by nikkkc Path Finder in Getting Data In 07-28-2016 0 9 | 0 | 9 | ||
| Hi Guys, I do data import from a CSV and I would like set the eventtime ( _time) to a specific column because the au... by nikkkc Path Finder in Getting Data In 07-27-2016 1 2 | 1 | 2 | ||
| Hi All, I got a request to create report for License Usage by Indexer Server and Top 10 Host usage per Indexer Serve... by kpavan Path Finder in Getting Data In 07-27-2016 0 4 | 0 | 4 | ||
| Why am I getting the following warning in splunkd.log WARN JobsFeed - Could not parse mtime for status.csv in searc... by jkloda Engager in Getting Data In 07-27-2016 3 1 | 3 | 1 | ||
| Hi How to get the user details from the Active directory with OU name using ldapsearch? by kiran331 Builder in Getting Data In 07-27-2016 0 1 | 0 | 1 | ||
| Hello, Is Splunk able to, before or after indexing, transpose column and rows in this way: original file: has colum... by test365498 Path Finder in Getting Data In 07-27-2016 0 10 | 0 | 10 | ||
| We found that we have a new server type with a new internal application that is using port 8089 and would not allow t... by psutton_et Explorer in Getting Data In 07-27-2016 0 5 | 0 | 5 | ||
| Splunk 4.1.4 on Win2008 R2, splunkweb is repeatedly terminating with "Bad file descriptor" error shown in web_serivce... by MattK Explorer in Getting Data In 07-27-2016 2 9 | 2 | 9 | ||
| We have a HF in UTC timezone that is received log events from an Universal Forwarder running on EDT timezone. The log... by bkumarm Contributor in Getting Data In 07-27-2016 0 6 | 0 | 6 | ||
| We made a mistake and logged a few 1000 fields in an event with a wrong format. Is there any way that we could edit t... by anoopsankar Engager in Getting Data In 07-27-2016 1 1 | 1 | 1 |