Getting Data In

Getting Data In
Community Activity
Kaushikkatta03
Hello , We have problem with Splunk forwarder usage. Will limiting the maxkbps=0 increase the speed of CPU usage an...
by Kaushikkatta03 Explorer in Getting Data In 08-01-2016
0 1
0
1
Wayoutwilly
Hi all Since I'm quite new at this, I was wondering is it possible (on Windows) to generate props.conf and transform...
by Wayoutwilly New Member in Getting Data In 08-01-2016
0 2
0
2
sspomeplus
Hello, Based on Splunk recommendation the best path for this file"props.conf" is: $SPLUNK_HOME/etc/system/local If...
by sspomeplus New Member in Getting Data In 08-01-2016
0 2
0
2
dshakespeare_sp
I have been given a log file to ingest into Splunk as part of a Lab exercise, but Splunk it not extracting the time a...
by dshakespeare_sp Splunk Employee Splunk Employee in Getting Data In 08-01-2016
0 4
0
4
mhuntington
Hello, I am new to Splunk and was recently given our organization's old Splunk project. Long story, but basically it...
by mhuntington Explorer in Getting Data In 07-31-2016
0 1
0
1
ArsenyKapralov
Hi I need to collect all Windows security logs from my infrastructure with Splunk UF installed which include specifi...
by ArsenyKapralov Path Finder in Getting Data In 07-31-2016
0 4
0
4
mhuntington
Hello, As I've said in a previous post, I am new to Splunk so please excuse the newb questions. I have been tasked ...
by mhuntington Explorer in Getting Data In 07-31-2016
0 2
0
2
mcrawford44
Has anyone run into this before? I'm unable to rotate logs due to files being opened by the forwarder. The files ha...
by mcrawford44 Communicator in Getting Data In 07-30-2016
0 4
0
4
Arkon
Hello, I am missing data in my current setup (about 20 to 30%). Instance A is sending data to Instance B on port 51...
by Arkon Explorer in Getting Data In 07-29-2016
0 7
0
7
templier
Hello. Does anyone have experience with what is reflected in the subject question (Journalctl logs)? I must copy t...
by templier Communicator in Getting Data In 07-29-2016
1 3
1
3
akdake
Hi, I get the following error when I restart our universal forwarder for AIX, 05-24-2016 18:06:26.872 +0800 INFO ...
by akdake Explorer in Getting Data In 07-28-2016
0 1
0
1
jagadeeshm
I created a new index (test_summary) in the Indexer for storing summary data. Then I created a new report in Search ...
by jagadeeshm Contributor in Getting Data In 07-28-2016
2 16
2
16
jenniferleenyc
I'm writing transforms.conf and props.conf in /splunk/home/etc/system/local to parse events before a certain string(...
by jenniferleenyc Engager in Getting Data In 07-28-2016
0 3
0
3
cj039165
Hello All our logging events start with a time stamp that looks like this: 00:00:23,746 The data in between the eve...
by cj039165 New Member in Getting Data In 07-28-2016
0 8
0
8
aaronkorn
Hello, We recently started to notice that a file that used to be monitored fine is no longer being pulled into splun...
by aaronkorn Splunk Employee Splunk Employee in Getting Data In 07-28-2016
3 1
3
1
nikkkc
Hi Guys, I do a data Input from a folder. The folder contains CSV files. Splunk imports all the data in a correct wa...
by nikkkc Path Finder in Getting Data In 07-28-2016
0 9
0
9
nikkkc
Hi Guys, I do data import from a CSV and I would like set the eventtime ( _time) to a specific column because the au...
by nikkkc Path Finder in Getting Data In 07-27-2016
1 2
1
2
kpavan
Hi All, I got a request to create report for License Usage by Indexer Server and Top 10 Host usage per Indexer Serve...
by kpavan Path Finder in Getting Data In 07-27-2016
0 4
0
4
jkloda
Why am I getting the following warning in splunkd.log WARN JobsFeed - Could not parse mtime for status.csv in searc...
by jkloda Engager in Getting Data In 07-27-2016
3 1
3
1
kiran331
Hi How to get the user details from the Active directory with OU name using ldapsearch?
by kiran331 Builder in Getting Data In 07-27-2016
0 1
0
1
test365498
Hello, Is Splunk able to, before or after indexing, transpose column and rows in this way: original file: has colum...
by test365498 Path Finder in Getting Data In 07-27-2016
0 10
0
10
psutton_et
We found that we have a new server type with a new internal application that is using port 8089 and would not allow t...
by psutton_et Explorer in Getting Data In 07-27-2016
0 5
0
5
MattK
Splunk 4.1.4 on Win2008 R2, splunkweb is repeatedly terminating with "Bad file descriptor" error shown in web_serivce...
by MattK Explorer in Getting Data In 07-27-2016
2 9
2
9
bkumarm
We have a HF in UTC timezone that is received log events from an Universal Forwarder running on EDT timezone. The log...
by bkumarm Contributor in Getting Data In 07-27-2016
0 6
0
6
anoopsankar
We made a mistake and logged a few 1000 fields in an event with a wrong format. Is there any way that we could edit t...
by anoopsankar Engager in Getting Data In 07-27-2016
1 1
1
1
Claim a $25 Cisco Store Gift Card
Help us improve the Splunk Community and complete our survey today!
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...