Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
How do I wildcard any windows drive letter in the inputs.conf stanza below?
inputs.conf
[monitor://[A-Z]:\Data\...
by
archspangler
Path Finder
in
Getting Data In
07-16-2015
|
0
|
4
| ||
|
I read somewhere this is possible, however I can't find where or how - looking for confirmation:
Essentially I hav...
by
LewisWheeler
Communicator
in
Getting Data In
07-14-2015
|
0
|
4
| ||
|
|
I have downloaded the install file splunkforwarder-6.2.4-271043-SunOS10-sparc.tar.z for a server running solaris10.
...
by
dhasemore
Engager
in
Getting Data In
07-20-2015
|
0
|
3
| ||
|
|
Here is the sample data.
RED: 2086 GREEN: 1579 WHITE: 159 PINK: 348 ORANGE: 0
by
pavan257
New Member
in
Getting Data In
07-18-2015
|
0
|
11
| ||
|
|
Hi. I'm brand new to using Splunk and just downloaded the Splunk Light trial.
I've followed the tutorial video fo...
by
pcampion
New Member
in
Getting Data In
07-09-2015
|
0
|
13
| ||
|
|
I created an input in the _json format and send to it httpd access logs. I received such logs:
Jul 14 14:35:44 172...
by
vinchakov_a
Path Finder
in
Getting Data In
07-14-2015
|
0
|
6
| ||
|
|
I have two platforms to monitor. I want to create one application that I can apply to all hosts that come on board. I...
by
brent_weaver
Builder
in
Getting Data In
07-20-2015
|
0
|
1
| ||
|
inputs.conf
[monitor:///home/foo/logs/*/app]
whitelist = \.gmt.log$
blacklist = monitor
disabled = false
Under...
by
pkeller
Contributor
in
Getting Data In
07-18-2015
|
0
|
2
| ||
|
|
I know that I can create custom source types by adding them to /etc/system/local/props.conf. However, I've created a ...
by
jfinnig3
Engager
in
Getting Data In
07-20-2015
|
0
|
3
| ||
|
|
Hi,
I have a field that I want to expand to multiple lines (it's email transactions), so I have a CSV of:
sour...
by
adolan
New Member
in
Getting Data In
07-20-2015
|
0
|
1
| ||
|
|
I want to monitor logs kept on a Linux box A, but I do not want to install a Splunk forwarder on box A. a Splunk forw...
by
ayushchoudhary
Path Finder
in
Getting Data In
07-20-2015
|
0
|
1
| ||
|
|
the default _time are actually at the time of indexing. however my logs have another time string which i have to sepa...
by
attgjh1
Communicator
in
Getting Data In
06-07-2012
|
0
|
7
| ||
|
|
Hi All,
I have been having significant trouble with one set of props/transforms for our environment. I have tried ...
by
domenico_perre
Path Finder
in
Getting Data In
07-17-2015
|
0
|
4
| ||
|
|
Hello,
In our use of Splunk we have encountered several problems in JSON indexing that caused to upgrade our Splun...
by
moneybox
Explorer
in
Getting Data In
07-19-2015
|
0
|
1
| ||
|
I've found myself recently looking at the Pipelines in Splunk, through the How Indexing Works wiki page, or
@amri...
by
acharlieh
Influencer
in
Getting Data In
07-17-2015
|
1
|
2
| ||
|
|
When I try to add Data Input, a blank screen appears. It s not moving forward and gives me no option to proceed.
by
aashish_122001
Explorer
in
Getting Data In
07-14-2015
|
0
|
2
| ||
|
|
Just had this pop up; there is only one instance of it in the notification area, but the time stamp keeps advancing, ...
by
wegscd
Contributor
in
Getting Data In
07-16-2015
|
0
|
10
| ||
|
|
The VM server is using the local name to bind to the application interface, thus data is being sent over on eth1-0, a...
by
ATT-CommonServi
New Member
in
Getting Data In
07-17-2015
|
0
|
3
| ||
|
|
I'm fairly new to Splunk and I can't figure out how to get Splunk to index my logs. I have configured my WebSense dev...
by
cuppma
Explorer
in
Getting Data In
02-27-2014
|
0
|
16
| ||
|
|
Was wondering how I can view my data retention settings in Splunk. Installation is on a Linux platform.
by
rgilliam
Engager
in
Getting Data In
06-26-2013
|
4
|
3
| ||
|
An app of ours spits such a huge volume of data when our Devs increase its debug level to Trace that it essentially r...
by
splunk_zen
Builder
in
Getting Data In
02-04-2015
|
0
|
6
| ||
|
|
Hi everyone, I have 3 folders called: www1, www2, www3, and I would like to get only 2 types of logs:
security.log...
by
Federica_92
Communicator
in
Getting Data In
07-16-2015
|
0
|
4
| ||
|
|
I am trying to generate report daily to monitor changes in knowledge objects (changes in permissions/new artifacts cr...
by
adityapavan18
Contributor
in
Getting Data In
07-13-2015
|
0
|
1
| ||
|
|
I have been searching for how to do this for the longest time and it's rather frustrating that I can't seem to find a...
by
jarrex
Explorer
in
Getting Data In
07-10-2015
|
0
|
4
| ||
|
|
Hi, I am successfully mirroring a filtered set of events at a heavy forwarder and sending them to a local TCP Syslog ...
by
brodieg
Engager
in
Getting Data In
07-15-2015
|
0
|
2
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Top Labels
-
add-on
2 -
administration
11 -
AIX
1 -
audit
1 -
blacklist
90 -
CLI
1 -
configuration
29 -
CSV
202 -
data
430 -
development
5 -
encryption
1 -
eval
2 -
field extraction
533 -
fields
4 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
889 -
host
151 -
HTTP Event Collector
420 -
index
526 -
indexer
674 -
indexing performance
1 -
inputs.conf
804 -
installation
4 -
intermediate forwarder
132 -
introduction
3 -
JSON
377 -
kvstore
1 -
Linux
427 -
login
1 -
Mac
29 -
metadata
1 -
metrics
2 -
modular input
179 -
monitor
302 -
monitoring console
1 -
other
22 -
proactive Splunk component monitoring
2 -
props.conf
929 -
regex
5 -
saved search
2 -
scripted input
237 -
search
1 -
search head
2 -
source
280 -
sourcetype
469 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
298 -
time
203 -
transforms.conf
547 -
troubleshooting
15 -
universal forwarder
1,500 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
14 -
whitelist
60 -
Windows
567 -
XML
89
- « Previous « Previous
- Next » Next »
Get Updates on the Splunk Community!
Splunk Answers Content Calendar, June Edition
Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...
What You Read The Most: Splunk Lantern’s Most Popular Articles!
Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...
See your relevant APM services, dashboards, and alerts in one place with the updated ...
As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...
