Getting Data In

Community Activity

Blacklist Windows Event ID 4769 Hi, I am trying to blacklist Windows Event ID 4769 from a particular User ID. Is this possible to be implemented. I ... by Yadukrishnan Explorer in Getting Data In 01-18-2024 0 5	0	5
Jamf Protect and Splunk Integration Issues Hi team, I've completed all the configurations according to the steps provided in the following link for integrating ... by btluynk Loves-to-Learn Lots in Getting Data In 01-18-2024 0 0	0	0
Single Splunk command to generate dummy data that can be run in the search bar Can someone advise on a single Splunk command that can be run in the search bar that will display dummy data? This wa... by lukesplunklukes New Member in Getting Data In 01-18-2024 0 8	0	8
Monitoring Oracle on a Solaris Cluster Hi, I need to monitor an Oracle database running on a Solaris Cluster. Do you have any suggestions on how to do it? ... by mzorzi Splunk Employee in Getting Data In 01-18-2024 1 3	1	3
merging as single event from mutlple lines Hi Guys, We are collecting the Kubernetes logs using HEC on our Cloud splunk. When ever there is a ERROR entry in the... by roopeshetty Path Finder in Getting Data In 01-18-2024 0 1	0	1
How to break events on timestamp? Events are merging like this:2022-02-02T15:26:46.593150-05:00 mycompany: syslog initialised2022-02-02T15:26:48.970328... by splunkN00b Observer in Getting Data In 01-17-2024 0 2	0	2
Change indexer i need to change a indexer for a data send by a universal forward, i've this data source_type="pippo" with sourcetyp... by toporagno Explorer in Getting Data In 01-16-2024 0 5	0	5
Splunk Forwarder: Why does it stop sending data after Too Many Fields? Hello, We have a heavy forwarder that occasionally receives and event that exceeds the bounds of Splunk indexers. Whe... by ohbuckeyeio Communicator in Getting Data In 01-16-2024 0 7	0	7
How to remove ::ffff: from the windows events logs at indexing time and in Search? Hi How to remove the ::ffff: before all the src_ip's and src in the windows event logs? What Regex I have to use in... by kiran331 Builder in Getting Data In 01-16-2024 0 7	0	7
CSV parsing fails because of long header Hello, I have a CSV file with many MANY columns (in my case there are 7334 columns with an average length of 145-146 ... by tmaoz Loves-to-Learn Everything in Getting Data In 01-16-2024 0 5	0	5
How to combine two queries? Hi All,I have 2 different queries and I want to combine their results. These 2 queries return a single value output I... by kranthimutyala Path Finder in Getting Data In 01-16-2024 0 15	0	15
Defined custom Visualization in Dashboard Studio Hi,I am creating a Dashboard and using the Dashboard Studio template, and previously I developed a SplunkVisualizatio... by hieuba Loves-to-Learn Lots in Getting Data In 01-15-2024 0 4	0	4
Masking email i need to masking email on my data, i'm tring using transforms.com but [emailaddr-anonymizer] REGEX = ([A-z0-9._%+-]+... by toporagno Explorer in Getting Data In 01-15-2024 0 1	0	1
Add-on for BlueCat IPAM (new) - BlueCat API v2 HiI didn't find an email address from the developer Christopher Caldwell so I try it this way.The BlueCat Address Man... by dermuergoo New Member in Getting Data In 01-15-2024 0 0	0	0
Broken SysMon link client to SIEM Hello Community,We have a challenge with our SysMon Instance.While testing compatibilities we noticed that after SysM... by DanAlexander Communicator in Getting Data In 01-15-2024 0 0	0	0
retention policy Hi All,I have tried looking over the documentation for this, but I am super confused. And really struggling to wrap m... by jbates58 Observer in Getting Data In 01-14-2024 0 4	0	4
Ingest actions in version 8.1.5 We have two indexers, one version 8.1.5 (which will not be updated soon) and version 9.1.0.1I see 9 has a nice featur... by gerrysr6 Explorer in Getting Data In 01-14-2024 0 9	0	9
Splunk upgrade from 8.1.4 to 9.0.6 on hf We successfully completed splunk upgrade from version 8.1.4 to 9.0.6 on indexers,search heads,and ds but we are facin... by ashiq1993 Loves-to-Learn in Getting Data In 01-14-2024 0 1	0	1
How to troubleshoot and fix the website input 504 Gateway Timeout Error while configuring an input ? Hi All, seeking help on this!For POC purpose I was trying to configure the google.com home page into Splunk website i... by Hemnaath Motivator in Getting Data In 01-13-2024 1 2	1	2
Consolidate events I have a lookup table I am using to pull in contact information based on correlation of a couple of fields. The way t... by raysonjoberts Path Finder in Getting Data In 01-12-2024 0 3	0	3
403 Error on some requesets Hello all,I send some logs from multiple endpoints to a standalone Splunk HTTP Event Collector. Many logs are sent su... by sigma Path Finder in Getting Data In 01-12-2024 0 1	0	1
Find HEC inputs How to find endpoints of our Splunk instance by pmantri10 New Member in Getting Data In 01-12-2024 0 2	0	2
Help in Splunk query urgent plz - merge results in 2 deferent source and same index csv files Dears,Need assistance with a Splunk query to retrieve data from two sources: source X and source Y. I want to match r... by abedcx Explorer in Getting Data In 01-12-2024 0 1	0	1
How to add BOM to alert attached CSV file? Hi experts, One of my customer wants to add UTF-8 BOM info to CSV files which are attached to email alerts. In case ... by kwchang_splunk Splunk Employee in Getting Data In 01-11-2024 0 5	0	5
we need to setup alert for montoring java processes we need to set up an alert if a server no java process for 15mins, only one alert was sent until the issue was solved... by jenniferhao Explorer in Getting Data In 01-11-2024 0 1	0	1