Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
We are trying to capture failed logons from our AD server but only want to capture specific event logs.
We are usi...
by
cannarella
Engager
in
Getting Data In
06-12-2014
|
3
|
11
| ||
|
|
I have a server class (wineventlog) that has a whitelist in the inputs.conf. It looks like this:
[WinEventLog://Se...
by
JoanHorikawa
New Member
in
Getting Data In
05-11-2016
|
0
|
5
| ||
|
|
When I startup Splunk (v6.3.0 for Linux), I've notices warning message when Splunk is Checking conf files for problem...
by
tlabue
Path Finder
in
Getting Data In
02-20-2016
|
0
|
5
| ||
|
|
Hi,
I am planning to install Splunk app for Rapid7 Nexpose. We use Nexpose Enterprise edition. While checking the ...
by
att35
Builder
in
Getting Data In
05-13-2015
|
0
|
2
| ||
|
|
Hi all
I have a search like this:
index=\* earliest=+1m latest=+30h sourcetype="WinEventLog:Sys*" Message=\*Upg...
by
agneticdk
Path Finder
in
Getting Data In
05-11-2016
|
0
|
2
| ||
|
Hi Team,
We are planning to migrate our existing indexed data to a new Enterprise Server which is up and running, ...
by
hemendralodhi
Contributor
in
Getting Data In
05-10-2016
|
0
|
4
| ||
|
|
Not so much a question, but an observation looking for confirmation. If true, looking to spread the word.
Recently...
by
bbeavise2g
Explorer
in
Getting Data In
05-11-2016
|
1
|
1
| ||
|
Hello guys, I am new to splunk and I am trying to input data from a perl script.
Script is very simple, a hellowor...
by
lemmerich
Engager
in
Getting Data In
05-11-2016
|
2
|
1
| ||
|
Good day,
We have one domain controller that is always about 5 hours behind in having the logs available in Splunk...
by
hermanyoung
New Member
in
Getting Data In
02-03-2016
|
0
|
4
| ||
|
|
I'm trying to delete a data input, but I'm getting this message:
Error occurred attempting to remove CPU Data: In ...
by
spersels
New Member
in
Getting Data In
07-08-2015
|
0
|
2
| ||
|
|
Hi there,
I have the following log line format (slightly edited for anonymity),
2013-08-14T08:54:10.098+0100 [I...
by
stephenmelrose
Engager
in
Getting Data In
08-14-2013
|
1
|
1
| ||
|
Hi,
I've started looking into Splunk Cloud for some customers. At the official Splunk website it says that the Spl...
by
hettervik
Builder
in
Getting Data In
12-08-2015
|
0
|
2
| ||
|
Early on in our Splunk deployment we set ANNOTATE_PUNCT to false on our indexers, both to save space and for performa...
by
jplumsdaine22
Influencer
in
Getting Data In
05-10-2016
|
2
|
6
| ||
|
|
Hi,
I'm wondering how load balancing in Splunk Cloud work.
When i install the splunkcloud.uf app on a local for...
by
hettervik
Builder
in
Getting Data In
05-11-2016
|
0
|
4
| ||
|
|
After deploying a search head cluster, I have a problem with searching anything. SHcluster status is up, but when I l...
by
slawny86
New Member
in
Getting Data In
02-09-2016
|
0
|
6
| ||
|
|
I installed a Splunk Universal Forwarder on a Windows Server 2012R2 using following command:
msiexec.exe /i splun...
by
jafars
New Member
in
Getting Data In
05-10-2016
|
0
|
3
| ||
|
|
Here's my setup: 1 search head, 4 indexers, 1 universal forwarder
The UF is trying to index a large file (2G), I'm...
by
lyndac
Contributor
in
Getting Data In
05-10-2016
|
0
|
1
| ||
|
Does anyone have a nice windows scripted input that will output the local certificate end date?
ie. something like...
by
Lucas_K
Motivator
in
Getting Data In
05-04-2016
|
0
|
5
| ||
|
|
Looking at my saved searches, about 99% of them do not have the "delete" action listed. There are one or two that do ...
by
jonathan_cooper
Communicator
in
Getting Data In
03-05-2013
|
0
|
8
| ||
|
|
Hello,
I am trying to find the difference between two time stamps using the below search:
index=abc | eval aver...
by
vrmandadi
Builder
in
Getting Data In
05-10-2016
|
0
|
3
| ||
|
I have a use case where a CSV in a shared location is being updated daily by project manager(s). I'm attempting to bu...
by
edenzler
Path Finder
in
Getting Data In
05-13-2013
|
1
|
5
| ||
|
|
Hi,
I have a few scheduled alerts setup on my SHC. The output is the list of hosts (UFs) that fall in the alert cr...
by
ishaanshekhar
Communicator
in
Getting Data In
05-09-2016
|
0
|
4
| ||
|
|
Hello, our logs have ISO 8601 date format with shorted year (YY instead of YYYY): "12-08-06 04:42:10". It is 6 of Aug...
by
kerne1
New Member
in
Getting Data In
08-07-2012
|
0
|
5
| ||
|
|
I am getting the warning message "Unable to fetch REST endpoint '/services/search/jobs' from 'https://127.0.0.1:8089'...
by
SarahBOA
Path Finder
in
Getting Data In
03-05-2013
|
1
|
3
| ||
|
|
Hi,
I have a few HP UX version 11.00 servers that I need logs sent to Splunk. I have successfully installed the f...
by
mmensch
Path Finder
in
Getting Data In
05-02-2016
|
0
|
4
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Top Labels
-
add-on
2 -
administration
11 -
AIX
1 -
audit
1 -
blacklist
90 -
CLI
1 -
configuration
29 -
CSV
202 -
data
426 -
development
5 -
encryption
1 -
eval
2 -
field extraction
532 -
fields
4 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
887 -
host
151 -
HTTP Event Collector
419 -
index
525 -
indexer
672 -
indexing performance
1 -
inputs.conf
803 -
installation
4 -
intermediate forwarder
132 -
introduction
3 -
JSON
377 -
kvstore
1 -
Linux
427 -
login
1 -
Mac
29 -
metadata
1 -
metrics
2 -
modular input
179 -
monitor
302 -
monitoring console
1 -
other
18 -
proactive Splunk component monitoring
2 -
props.conf
926 -
regex
5 -
saved search
2 -
scripted input
237 -
search
1 -
search head
2 -
source
279 -
sourcetype
469 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
298 -
time
202 -
transforms.conf
547 -
troubleshooting
15 -
universal forwarder
1,499 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
14 -
whitelist
60 -
Windows
567 -
XML
89
- « Previous
- Next »
Get Updates on the Splunk Community!
Exciting News: The AppDynamics Community Joins Splunk!
Hello Splunkers,
I’d like to introduce myself—I’m Ryan, the former AppDynamics Community Manager, and I’m ...
The All New Performance Insights for Splunk
Splunk gives you amazing tools to analyze system data and make business-critical decisions, react to issues, ...
Good Sourcetype Naming
When it comes to getting data in, one of the earliest decisions made is what to use as a sourcetype. Often, ...
