Getting Data In

Community Activity

Unable to monitor a windows file. What are some reasons why a UF wouldn't monitor a windows file assuming there is nothing wrong with any configs and t... by dspencer Path Finder in Getting Data In 03-06-2024 0 6	0	6
Memory Spike on Universal Forwarder when specific inputs.conf stanza is included Hello,We have the universal forwarder running on many machines. In general, the memory usage is 200MB and below. Ho... by RyanPrice Engager in Getting Data In 03-06-2024 0 2	0	2
Data inputs details for each index Hi,I'd lilke to create a detailed report with info including the type of forwarder, the average KB/s, the OS, the IP,... by hazardoom Engager in Getting Data In 03-06-2024 0 0	0	0
Windows Eventlogs (Extract RAW from one splunk and import to another) We are currently changing our splunk server to a new one and during the change there was a mix up and we got data sen... by PatrikL Observer in Getting Data In 03-06-2024 0 3	0	3
regex error Hi Team,While running the query I'm able see this error.but how to overcome this I have tried with spath command, but... by prasireddy Explorer in Getting Data In 03-06-2024 0 8	0	8
CSV log unexpectedly breaking by lines Hello to everyone!I have a Win server with Splunk UF installed that consumes MS Exchange logsThis logs is stored in C... by NoSpaces Contributor in Getting Data In 03-06-2024 0 5	0	5
How do I modify my rex command to remove directory location from path? Here is my current rex command - EventCode=1004 \| rex field=_raw "Files: (?<Media_Source>.+?\.txt)" \| table Media_... by jeradb Explorer in Getting Data In 03-05-2024 0 1	0	1
Trying to push slurm data logs to Splunk How do I get slurm log content into Splunk? by taarmi Engager in Getting Data In 03-05-2024 0 2	0	2
transforms.conf: Need to ignore specific events. I have a simply Splunk set-up. about 120 or so Linux servers (that are all basically appliances) w/ universal forwar... by Egyas Explorer in Getting Data In 03-05-2024 0 4	0	4
Indexed only Partial Contents of log file Hi,We are monitoring whole file in index. As file is in huge in size. which indexed all the content of files.But we r... by dhirendra761 Contributor in Getting Data In 03-05-2024 0 3	0	3
Catalogue Log/Data inputs details for each index Hi,We have around 340 indexes and I need to know which universal/heavy forwarder forwards data to which exact index. ... by hazardoom Engager in Getting Data In 03-05-2024 0 4	0	4
Accept Commvault logs in on-prem Splunk servers Question: We are using Commvault Metallic to backup our O365 cloud-based user data in the Microsoft GCC. How can we... by pingli New Member in Getting Data In 03-04-2024 0 1	0	1
Azure DevOps Daily Commits Info in Splunk Has anyone tried this add-on to pull the tfs commits into Splunk via Azure DevOps (Git Activity) - Technical Add-On. ... by ps23 Explorer in Getting Data In 03-04-2024 0 3	0	3
s2s negotiation failed between forwarder running host and indexers Using splunkforwarder-9.0.2-17e00c557dc1.x86_64 on forwarder linux boxUsing splunk-9.0.4-de405f4a7979.x86_64 on index... by parth995 Loves-to-Learn Lots in Getting Data In 03-04-2024 0 2	0	2
HEC Token Authentication Failures Dear Splunkers, If I could get an answer on how do I find which HEC token is causing authentication failures (num_of_... by anil19 Engager in Getting Data In 03-04-2024 0 1	0	1
Splunk Enterprise security Filters I have installed the latest splunk with Splunk enterprise security on it.I have worked with enterprise security befor... by Nawab Communicator in Getting Data In 03-02-2024 0 11	0	11
Sending 2 logtypes to 2 different splunk environments I have a few servers that have universal forwarders that need to be updated where I can send the Application data to ... by FPERVIL Explorer in Getting Data In 03-01-2024 0 3	0	3
Create custom fields at indextime on Heavy Forwarders Hi at all,I have to create a custom field at index time, I did it following the documentation but there's something w... by gcusello SplunkTrust in Getting Data In 03-01-2024 0 20	0	20
rebuild a syslog event Hi Folks, I have a quick question.currently I have a syslog event and I need to see in splunk the raw data the info i... by asabatini Splunk Employee in Getting Data In 03-01-2024 0 4	0	4
How to monitor Apache Hadoop clusters with Splunk Enterprise 6 or later versions? I found the app - Splunk App for HadoopOps but it only supports Splunk Enterprise 5. I am now using Splunk Enterprise... by xingsd163 New Member in Getting Data In 03-01-2024 0 6	0	6
How can I install a forwarder on an AWS:EC2 instance to send data to a local Server? We have recently moved some of our applications to the AWS cloud and now I am being tasked with: "install and configu... by mlinebarger Explorer in Getting Data In 02-29-2024 2 7	2	7
identify the sender of an HEC data flow i at all,I'm ingesting data using HEC in a distributed infratructure using a Load Balancer to distribute traffic from... by gcusello SplunkTrust in Getting Data In 02-29-2024 0 1	0	1
Splunk Cloud Syslog Logs Hello Everyone, New to splunk in my current role, we have had to downgrade our firewall version and switch it to a p... by Atriox New Member in Getting Data In 02-29-2024 0 2	0	2
Monitor memory performance for windows servers Hi Team,As we need to monitor memory by process for each windows hosts. As checked we couldn't find any processes for... by Pooja1 Loves-to-Learn Everything in Getting Data In 02-29-2024 0 10	0	10
Setting searchable retention while creating Index from GUI Hi,I am starting with splunk admin and is confused about one topic. It might be silly.While creating an index, we get... by man03359 Communicator in Getting Data In 02-29-2024 0 3	0	3