Getting Data In

Community Activity

Universal forwarder installation on a splunk server? Hello, I'm reading the Forwarder Management manual and it states " Do not install the universal forwarder over an exi... by Lwoods Path Finder in Getting Data In 01-28-2024 0 8	0	8
Field Alias A user wants to create a new field alias for a field that appears in two sourcetypes.How many field aliases need to b... by riyu Engager in Getting Data In 01-28-2024 0 2	0	2
how to work with transforms.conf HelloI have few services that today sends data some index via code.We are going to remove this index and create new o... by sarit_s Communicator in Getting Data In 01-28-2024 0 1	0	1
Solaris SPARC server integration with Splunk Hi All,I need to collect system metrics and monitor local files on Solaris servers. I'm considering installing the Un... by vikesh Loves-to-Learn in Getting Data In 01-28-2024 0 1	0	1
Not getting normal logs from UPS, but test logs work at any severity level I'm not very experienced with Splunk, but I've been asked to set up syslog forwarding from our UPS's to our Splunk se... by dg03 New Member in Getting Data In 01-28-2024 0 1	0	1
Sample C++ Boost code to send msg to Splunk Hi,I'm trying to run this below sample code to send msg to Splunk, but getting error - Host not found.Am I doing righ... by dilipkha New Member in Getting Data In 01-27-2024 0 2	0	2
Local Event Log Collection on Mac Hello,I am brand new to Splunk and after watching a short tutorial to get started, I saw that Settings => Data Input ... by White-Hax New Member in Getting Data In 01-25-2024 0 1	0	1
Data Models mapping not working for me Hello, community,I wanted to share a challenge that I have mapping fields to Data Models. The issue is that I have id... by DanAlexander Communicator in Getting Data In 01-25-2024 0 1	0	1
How do we define collections.conf in SplunkCloud? Creating Lookup Definition (transforms stanza) can be done on Splunk Web UI. But since we need to point a kv definiti... by morethanyell Builder in Getting Data In 01-25-2024 0 5	0	5
Filter which events to be ingested Hello everyone , I need to onboard a huge amount of logs which the 90% of them is unnecessary . My goal is to ingest ... by stamatoc Engager in Getting Data In 01-25-2024 0 2	0	2
How to ingest file that need to calculate timestamp for each events using elasped time and trigger time How to this the following file based on trigger time and elapsed time?"File name","AUTO_231126_012051_0329.CSV","V2.1... by kyokei Explorer in Getting Data In 01-25-2024 0 6	0	6
HF not send the logs to Splunk Cloud instance Hi Splunkers, i already done configuration of HF and install uf credentials. but i can't see the logs of palo alto in... by Unnamed16 Loves-to-Learn in Getting Data In 01-24-2024 0 1	0	1
Assistance Needed for Setting Up Assets and Identity from Scratch Hi,Can someone please assist me in setting up assets and identity from the scratch, and what prerequisites are necess... by smith_ Builder in Getting Data In 01-24-2024 0 2	0	2
How to monitor a log file that is getting trimmed at beginning of file We are using Splunk 9 and are seeing a situation where a file gets re-ingested entirely each time the vendor product ... by whitepaw00 Explorer in Getting Data In 01-24-2024 0 4	0	4
Slack notification error code 1 I'm trying to get Slack alerts set on my Splunk Cloud instance but the test give me the following output:04-14-2023 2... by Alicynx New Member in Getting Data In 01-24-2024 0 1	0	1
No events from Universal Forwarder I installed Universal Forwarder On Linux Machine and integrate it with Splunk , but their is no logs returned on Splu... by aly347774 Loves-to-Learn Lots in Getting Data In 01-23-2024 0 6	0	6
How to convert the time from hh:mm:ss.6Q into hh:mm:ss ? HI Can someone please let me know how to convert the time from the format hh:mm:ss.6Q to hh:mm:ss ?? by Real_captain Path Finder in Getting Data In 01-23-2024 0 1	0	1
Difference between the 2 time fields Hi Can someone please let me know how i can find the difference between the 2 fields Start-Time and End-Time in the b... by Real_captain Path Finder in Getting Data In 01-23-2024 0 1	0	1
How to restart Universal Forwarder from a Deploy Server? Hi, I need restart many servers (Universal Forwarders) Unix from a Deploy Server. Is there any way to do it? Thank... by kisero Engager in Getting Data In 01-23-2024 6 12	6	12
calls indexing 'in the future' on a HEC using a custom source type So...I have a HEC receiving JSON for phone calls using a custom sourcetype which parses calls from a field called tim... by loganramirez Path Finder in Getting Data In 01-22-2024 0 7	0	7
CPU Performance Monitoring in Splunk Cloud Hi There,I use a Splunk Cloud instance with Universal Forwarders installed on each server. From here I have edited th... by jamie1 Communicator in Getting Data In 01-22-2024 0 2	0	2
PAVO Getwatchlist - nested array parsing and other woes Good day,First I want to say that this add-on is an absolute lifesaver when it comes to getting structured data into ... by K_Sukumar Loves-to-Learn in Getting Data In 01-22-2024 0 0	0	0
summary indexing Hello.Im using Splunk cloud and thinking about add summary index or data model.I'm trying to understand the differenc... by SplunkySplunk Explorer in Getting Data In 01-22-2024 0 4	0	4
splunk group in linux Hello,I noticed that in versions upper 9.1, the user and group were changed to "splunkfwd"I have updated the universa... by maede_yavari Explorer in Getting Data In 01-21-2024 0 4	0	4
How to configure to mask the sensitive field dob and ssn value in below logs? 2023-08-04 08:53:00.473, ID="15438391", EventClass="10", textdata="exec up_tcsbs_ess_ins_ipsysuser @IID=20231619,@R... by Hemant93 Loves-to-Learn Lots in Getting Data In 01-21-2024 0 1	0	1