Getting Data In

Community Activity

New and started to input data So this is the first time I was trying to input the TCP data port to my monitoring. I am behind a NAT as it is with ... by dxw350 Path Finder in Getting Data In 08-12-2016 0 1	0	1
How to import Multiple CSVs as exclude and include lists? Hello, I'm trying to do a search for requests made to a list of malicious domains defined in a csv file, but excludi... by karatyman Engager in Getting Data In 08-12-2016 0 2	0	2
Confuguring events for AS400 logs Hi... I have a AS400 syslog file. for which I am want to configure splunk to pick up the events at every 2 lines. Pl... by yasinmoha Path Finder in Getting Data In 08-12-2016 0 5	0	5
What is the best approach to drop some of the data to nullQueue in Splunk Enterprise..? What is the best approach to drop some of the data to nullQueue in Splunk Enterprise..? by prakash007 Builder in Getting Data In 08-12-2016 1 2	1	2
I created a field that has 3 values. How can I change one of the values from WARNING to WARN using lookups? I created a field and it has 3 values. I just want change one of the values from WARNING to WARN using lookups(.CSV).... by krishnani New Member in Getting Data In 08-12-2016 0 6	0	6
fschange and legacy system logs app Have an app that monitors system logs. Specifically files in the /etc/ path using fschange. I know that fschange is "... by tkwaller Builder in Getting Data In 08-12-2016 0 2	0	2
ipv6 forwarders? At one of the Splunklives last week, someone mentioned that they had a full-on ipv6 network and were unable to use sp... by John_Mark Splunk Employee in Getting Data In 08-12-2016 2 6	2	6
Why does Splunk CSV export change the time format to Epoch time? How to fix it? I am a newbie on Splunk. When I do a search on Splunk, time is shown as normal MM:DD:YYYY HH:MM:SS format However, ... by rajnepali New Member in Getting Data In 08-11-2016 0 4	0	4
Using a csv lookup to exclude results from a query, but not working if more than one column of fields I have a lookup table that I want to use to exclude results from a search. I want to exclude results if something in ... by sknot1454 Explorer in Getting Data In 08-11-2016 0 3	0	3
Is it possible for me to enable TCP data inputs on Splunk Cloud? Hi, Could I enable TCP Data Inputs on Splunk Cloud? I'm trying to check which data inputs are available for Splunk... by wpoch Engager in Getting Data In 08-11-2016 0 1	0	1
Are there any apps for Heroku on Splunk Cloud for event monitoring? Hi Team, Do we have any apps for Heroku on Splunk Cloud for event monitoring, similar to the Splunk App for Salesfor... by satyatej18 Explorer in Getting Data In 08-11-2016 0 1	0	1
How do I configure props.conf for Splunk to index a binary .dat file? Hi, Today I encountered a strange thing in Splunk. I have Splunk 6.4.1 running on a Linux server. I tried to inde... by omerr Explorer in Getting Data In 08-11-2016 0 1	0	1
We have a shortage of disk space in one indexer. Can we delete data present in the colddb directory? We are currently running out of space in one Splunk indexer out of 5 indexers in our distributed environment. Using S... by Hemnaath Motivator in Getting Data In 08-11-2016 0 24	0	24
Need to prevent pattern from being parsed and shown in to the logs. I am trying to parse this message and sending "Timer_ConnectionIdle" in to nullQueue. I am not using heavy forwarder... by saxenaamit New Member in Getting Data In 08-11-2016 0 5	0	5
Why can't I install Splunk on windows 7 64 bit and getting error "Splunk Enterprise Setup Wizard ended prematurely..."? Hello I'm newbie with Splunk. I would like to discover the product after a friend had talk to me about it. So I got t... by mougeolle New Member in Getting Data In 08-11-2016 0 4	0	4
props.conf stanza and zip files containing logs Hi everyone, yesterday I spent most of the day battling through transforms.conf and props.conf - with lucrative resul... by jlvix1 Communicator in Getting Data In 08-11-2016 0 5	0	5
Compare the time for the execution Hello Champions, I come across a very complex logic to tag jobs on its start time. We have one calculated value, i... by praveenkpatidar Explorer in Getting Data In 08-10-2016 0 5	0	5
Has Anyone put a Forwarder on a Tablet? Has anyone captured Windows Event Logs from tablets and forwarded it to their indexer? We're currently trying to so... by skoelpin SplunkTrust in Getting Data In 08-10-2016 0 2	0	2
Does Splunk index gzip files? I'd like to index a directory of 50,000 gzip files. The files range in size from 1 KB to 5 MB. Can Splunk monitor t... by hulahoop Splunk Employee in Getting Data In 08-10-2016 3 5	3	5
Event pattern for sourcetype I'm troubleshooting some issues with one sourcetype and realized that Splunk is not indexing events very well. The fo... by krishnani New Member in Getting Data In 08-10-2016 0 3	0	3
Does a universal forwarder's persistent queue exist after a reboot? According to this document: http://docs.splunk.com/Documentation/Splunk/6.4.0/Data/Usepersistentqueues The in-memo... by dflodstrom Builder in Getting Data In 08-10-2016 0 2	0	2
Splunk date time format In splunk, I have a file which has date in the format June 16th,2014 and I am trying to extract out the month_year va... by singhnitin New Member in Getting Data In 08-10-2016 0 5	0	5
Whats causes "Cannot create another input for the event log "Application". One already exists"? I have 2 remote locations with multiple PCs in both places. I have installed the forwarder on all devices (Windows PC... by richardblyth New Member in Getting Data In 08-10-2016 0 4	0	4
Can I force a powershell input to execute the .ps1 script as an administrator? Our Spunk service runs as a Mcrosoft Managed Service Account (MSA) and that MSA is an admin account and we have a Pow... by lycollicott Motivator in Getting Data In 08-10-2016 0 8	0	8
How to do bucketing on json data? I have a json data similar to the example given below { "name":"srini", "date":"20160801", "distribution": { "20":1,... by ksrujana New Member in Getting Data In 08-10-2016 0 1	0	1