Getting Data In

Community Activity

xml index size greater than log file Hi, I am having an issue with my data ingestion. I have a xml log file that I am ingesting that is 1GB in size but is... by Strangertinz Path Finder in Getting Data In 10-25-2023 0 0	0	0
Multiple monitor stanzas with wildcard and single file in inputs.conf Hello,is it possible to have mydirectory\*.log monitor stanza to route data to usual indexers (or any specific monito... by splunkreal Motivator in Getting Data In 10-25-2023 0 6	0	6
BeyondTrust PRA Appliance Syslog Over TLS via Input Config So we are trying to send Syslog from our BeyondTrust PRA Appliance to Splunk. We have validated via the SSL/TLS test ... by fillory4ever Observer in Getting Data In 10-25-2023 0 1	0	1
Upload failed with WARN : supplied index 'xxx' missing? We're using Splunk Cloud 8.2.2202.1 and have a data upload issue.I can upload a CSV using the Add Data button in Set... by SeanBatt Explorer in Getting Data In 10-25-2023 0 5	0	5
Logs not flowing to splunk index from GCP -Solution Hi Everyone!. I'm here to share the resolution for one of the frequent errors that we see in internal logs and source... by splunkeremy Engager in Getting Data In 10-25-2023 1 0	1	0
Error when using npm run build for Custom Visualization Tutorial Hello,I was going through the Custom Visualization Tutorial here: https://docs.splunk.com/Documentation/Splunk/9.1.1/... by nw Loves-to-Learn in Getting Data In 10-24-2023 0 1	0	1
Is Rhel 8.2 Compatible with Splunk Agent? Is Rhel 8.2 Compatible with Splunk Agent?Is there any existing server RHEL 8.2 with Splunk Agent? Or new costing?Plea... by deephi Explorer in Getting Data In 10-24-2023 0 2	0	2
UDP input acceptFrom overriding the catchall I have a generic catchall for syslog traffic that is breaking when i try and use an acceptFrom for a subnet. --- Gene... by hiersdd Loves-to-Learn Lots in Getting Data In 10-23-2023 0 4	0	4
Splunk Ingest Actions - Using Eval Expression Syntax In configuring Rules for Splunk Ingest Actions I have a sourcetype configured for numerous "Filter with Regular expre... by gazoscreek Path Finder in Getting Data In 10-23-2023 0 1	0	1
Splunk Enterprise 7.0.1 not populating Events from SCOM 2007 R2 after installing Splunk Add on for Microsoft SCOM version 2.1.0 I have installed product Splunk Enterprise 7.0.1 & downloaded it. I installed the product on Windows 7 machine & also... by sameerchowdhary New Member in Getting Data In 10-23-2023 0 2	0	2
Is there a way to set JSON syntax highlighting by default? Hi, The syntax highlighting for JSON data (with INDEXED_EXTRACTIONS = JSON) is a nice feature. However, from what I c... by Glenn Builder in Getting Data In 10-20-2023 3 12	3	12
Capability to edit alerts Hello everyone!I create the role for splunk users, which will be able to edit alerts.What capabilities should I choos... by bosseres Contributor in Getting Data In 10-19-2023 0 1	0	1
Control-M (bmc software) integration in Splunk for job scheduling monitoring Hi all, We wonder to know if there is a way to integrate the alerts generated by Control-M (BMC software tool to man... by alartran Engager in Getting Data In 10-19-2023 0 3	0	3
Does Splunk 9.1 compatible with RHEL 9 ? Does Splunk 9.1 completely compatible with RHEL 9?I need to know which version of Splunk with which version of RHEL d... by maede_yavari Explorer in Getting Data In 10-19-2023 0 3	0	3
password in $SPLUNK_HOME/etc/system/local/web.conf not being hashed Hi Community, The sslPassword in Seach Head $SPLUNK_HOME/etc/system/local/web.conf not being hashed.Other .conf passw... by splunk_newbie3 Loves-to-Learn Everything in Getting Data In 10-19-2023 0 1	0	1
Index changes after Device IP changed and hardware refreshed Hi Community, One of the log source (e.g. index=my_index) at my company's splunk became inter=main. After multiple in... by splunk_newbie3 Loves-to-Learn Everything in Getting Data In 10-18-2023 0 1	0	1
How to resolve this Splunk_TA_aws error? Hi, I have deployed the Splunk TA aws application on a test environment. For authentication I'm using AWS roles. The ... by maa_splunk Engager in Getting Data In 10-18-2023 2 2	2	2
How to edit inputs.conf to prevent WinNetMon from using up all my license? I enabled WinNetMon and need to throttle it back. Here is my inputs.conf: ###### Network monitoring ###### [WinNetMo... by brent_weaver Builder in Getting Data In 10-18-2023 2 12	2	12
How do I resolve the error: The lookup file could not be saved I am trying to save a lookup file in the Splunk App for lookup file editing and I get the error: The lookup file cou... by waJesu Path Finder in Getting Data In 10-18-2023 0 1	0	1
Map fields to sourcetype Hi All, I need help building a SPL that would return all available fields mapped to their sourcetypes/source Looking... by DanAlexander Communicator in Getting Data In 10-18-2023 0 4	0	4
How to monitor application services Hi All,we have some process related service like application services running in windows, how can i get those status.... by sekhar463 Path Finder in Getting Data In 10-18-2023 0 2	0	2
Why is my powershell script for input-stanza not working? Hi community! I've tried and exhausted all my brain cells but I still couldn't make this work. Any ideas?Below is dep... by morethanyell Builder in Getting Data In 10-17-2023 0 6	0	6
sending specific events to nullqueue using props & transforms I am trying to setup props & transforms to send DEBUG events to null queuei tried below regex but that doesnt seem to... by Sid Explorer in Getting Data In 10-17-2023 0 18	0	18
Data Models CIM compliance how to indetify data sources needed for the Data Sets individual fields Hi All, trying to identify what data source/sourcetype is needed for each individual field while performing Data Mode... by DanAlexander Communicator in Getting Data In 10-17-2023 0 2	0	2
Data onboarding, splunk-server field massing up the whole data can someone help me with this issue where splunk is reading the file, but 'adding' a information that is NOT in the o... by yohhpark Path Finder in Getting Data In 10-16-2023 0 5	0	5