Getting Data In

Community Activity

Is it possible to install Splunk on Windows 10? I'm getting a canceled installation without any error. I'm trying to install Splunk Enterprise on Windows 10, but this isn't working. I'm getting a canceled installation wi... by Timerik New Member in Getting Data In 11-07-2015 0 5	0	5
How do I edit my configuration to index security event logs for Windows success/failed login and logout events? Hi, I installed Splunk Enterprise to a single instance and am installing the Splunk Universal Forwarder. The goal i... by amadmin New Member in Getting Data In 11-06-2015 0 8	0	8
How to remove duplicate data and how to prevent having duplicate data? Hi I have many configuration text file which basically looks like this: Owner Name: AAAAA AAAAA Product Name: AAAA A... by edrivera3 Builder in Getting Data In 11-06-2015 0 20	0	20
Identifying day of the week/holiday from time stamp date Hello experts, Is there any easy way to use Splunk (maybe using look ups or a pre-defined function)to identify if a ... by wdeoliveira_spl Splunk Employee in Getting Data In 11-06-2015 0 1	0	1
How do I monitor Jenkins job logs and junitResult.xml from the same directory tree and parse them differently? I’m setting up Splunk for our jenkins logs which are in a directory tree as that looks like this Splunk Branch/ ... by mszebenyi_splun Splunk Employee in Getting Data In 11-06-2015 1 3	1	3
Can the Universal Forwarder send logs to an AWS S3 bucket? Hello, We would like to be able to have our universal forwarders that are installed on AWS instances, to forward log... by RecoMark0 Path Finder in Getting Data In 11-06-2015 0 1	0	1
How can I handle special characters from my log like blank spaces and asterisk? Is there like a scape character in searching? There is a field in my log which can assume special characters as values, as below. action="A";parm="asdfg";ans="OK"... by tcmarquesi Explorer in Getting Data In 11-06-2015 0 1	0	1
How do I stop a Splunk Heavy Forwarder from sending Info Metrics events via syslog? Hello, I'm playing around in the lab and I've set up a configuration where a Splunk heavy forwarder is receiving Win... by tonyparreiro Explorer in Getting Data In 11-06-2015 1 4	1	4
Compression of Splunk internal logs Hello, I have a small instance of Splunk with not a lot of disk space and therefore, I was wondering if it was possi... by fgt Engager in Getting Data In 11-06-2015 0 1	0	1
What is the best practice for getting logs from a Docker container into Splunk? So, I have about a thousand ways to index logs from a Docker container, but what I'm looking for is some kind of best... by jtiner New Member in Getting Data In 11-06-2015 0 1	0	1
How to get logs into Splunk from Private Cloud Containers? We are planning a Private Cloud implementation of Java applications using a Cloud Vendor. We use Splunk Forwarders on... by ezajac Path Finder in Getting Data In 11-05-2015 0 1	0	1
Splunk Universal Forwarder Deployment with SCCM Hello, We are trying to deploy the Splunk Universal Forwarder using Microsoft SCCM. I can successfully install the M... by asofo Path Finder in Getting Data In 11-05-2015 0 3	0	3
HP C Class enclosure logs Is it possible to get HP C Class enclosure logs in Splunk ( Virtual Connect System log ) by tajike New Member in Getting Data In 11-05-2015 0 1	0	1
When importing a CSV in Splunk Web, how do I automatically extract values from "Month" and "Year" fields into the _time field? Hi! I'm in the middle of importing a CSV using the Splunk GUI and am attempting to extract, from two different field... by faramarz Path Finder in Getting Data In 11-05-2015 0 9	0	9
How to write a search to produce one pie chart per host showing percentages of sourcetypes? I'm trying to analyze the makeup of different event types coming from a series of different hosts. To do that, I woul... by JdeFalconr Explorer in Getting Data In 11-05-2015 0 8	0	8
Attempting to put Splunk Search Head behind Barracuda firewall using Apache Reverse Proxy We have a barracuda firewall and are trying to present Splunk SH. There is an issue in the way splunk is coded (pr so... by brent_weaver Builder in Getting Data In 11-05-2015 0 2	0	2
How to troubleshoot why I'm getting handshake errors in forwarder logs? Hi, I am trying to push data to Splunk server from my workstation, but getting the INFO & WARN logs below in the spl... by sunnyparmar Communicator in Getting Data In 11-04-2015 0 1	0	1
Modular Input Checkpoint I am writing a modular input and the script pulls list of the records in each interval when it runs. e.g. Name ... by sanjay_shrestha Contributor in Getting Data In 11-04-2015 0 2	0	2
How do Splunk indexes work? How Splunk indexes work? What kinds of indexes does Splunk use, as compared to B+ tree or Hash index in RDBMS? by kevinhylee New Member in Getting Data In 11-04-2015 0 4	0	4
Can I upgrade my Linux universal forwarders directly from Splunk 6.0.3 to 6.3.0? Hello, Just checking to see if it is okay to upgrade my Linux universal forwarders directly from 6.0.3 to 6.3.0 or i... by lbogle Contributor in Getting Data In 11-04-2015 0 1	0	1
Is there, or will there be, an app or add-on to perform activity monitoring for MongoDB? Is there, or will there be, an app or add-on to perform activity monitoring for MongoDB as there is for Oracle, MS SQ... by curryRick Explorer in Getting Data In 11-04-2015 0 2	0	2
Windows Event Log Inputs - Combining whitelists of EventCodes and SourceNames I am trying to collect a whitelist of about 200 EventCodes in the Windows Security log, in addition to ANY event in t... by adam_reber Path Finder in Getting Data In 11-04-2015 0 2	0	2
After upgrade to Splunk Enterprise 6.3 we are receiving "Failed to fetch REST endpoint uri=https://127.0.0.1:8089/services/licenser/slaves?count=0 from server=https://127.0.0.1:8089" Since upgrading to Splunk version 6.3 we are receiving in the splunkd.log every 10 mins : ERROR SearchOperator:rest ... by peter5687 Engager in Getting Data In 11-04-2015 4 3	4	3
How do I only see the latest data from a dynamically changing CSV file? I have a customer's CSV file that is dynamically updated. By that' what i mean is that the last row is sometimes del... by ragedsparrow Contributor in Getting Data In 11-04-2015 0 2	0	2
How do I configure Splunk to extract the timestamp from a new log file I'm trying to index? Hello, Splunkers! I'm trying to add a new log file, but I can't extract the correct timestamp. Help me to write any ... by shbagautdinov Path Finder in Getting Data In 11-04-2015 0 6	0	6

Get Updates on the Splunk Community!

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Between hands-on technical sessions, keynote reveals, and diving into live architectures, .conf26 is packed ...

Join the Hackathon at .conf26 and build a No-Code AI agent

Join us for the AI Agent Buildathon, an in-person, three-hour hands-on Hackathon where you’ll use Splunk Agent ...

Getting Data In

Is it possible to install Splunk on Windows 10? I'm getting a canceled installation without any error.

How do I edit my configuration to index security event logs for Windows success/failed login and logout events?

How to remove duplicate data and how to prevent having duplicate data?

Identifying day of the week/holiday from time stamp date

How do I monitor Jenkins job logs and junitResult.xml from the same directory tree and parse them differently?

Can the Universal Forwarder send logs to an AWS S3 bucket?

How can I handle special characters from my log like blank spaces and asterisk? Is there like a scape character in searching?

How do I stop a Splunk Heavy Forwarder from sending Info Metrics events via syslog?

Compression of Splunk internal logs

What is the best practice for getting logs from a Docker container into Splunk?

How to get logs into Splunk from Private Cloud Containers?

Splunk Universal Forwarder Deployment with SCCM

HP C Class enclosure logs

When importing a CSV in Splunk Web, how do I automatically extract values from "Month" and "Year" fields into the _time field?

How to write a search to produce one pie chart per host showing percentages of sourcetypes?

Attempting to put Splunk Search Head behind Barracuda firewall using Apache Reverse Proxy

How to troubleshoot why I'm getting handshake errors in forwarder logs?

Modular Input Checkpoint

How do Splunk indexes work?

Can I upgrade my Linux universal forwarders directly from Splunk 6.0.3 to 6.3.0?

Is there, or will there be, an app or add-on to perform activity monitoring for MongoDB?

Windows Event Log Inputs - Combining whitelists of EventCodes and SourceNames

After upgrade to Splunk Enterprise 6.3 we are receiving "Failed to fetch REST endpoint uri=https://127.0.0.1:8089/services/licenser/slaves?count=0 from server=https://127.0.0.1:8089"

How do I only see the latest data from a dynamically changing CSV file?

How do I configure Splunk to extract the timestamp from a new log file I'm trying to index?

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

All Work and No Play? Not at .conf26! Unwind at These Evening Events

Join the Hackathon at .conf26 and build a No-Code AI agent

Issue facing while installing Splunk Add-on for AW...

Google workspace Meet logs

CiscoSecurityCloud TA 3.6.7 -eStreamer ingestion f...

SC4S postfilter not dropping Fortigate east-west t...

Transilience AI threat intel feed integration

Getting Data In

Join the Conversation