Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Getting Data In
Getting Data In
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Splunk Administration
- :
- Getting Data In
Options
- Mark all as New
- Mark all as Read
- Float this item to the top
- Subscribe
- Bookmark
- Subscribe to RSS Feed
- Threaded format
- Linear Format
- Sort by Topic Start Date
Discussions
| Thread Info | |||||
|---|---|---|---|---|---|
|
Can Splunk writeback to the file that it's reading for reporting?
by
monalisadas
New Member
in
Getting Data In
01-13-2015
|
0
|
2
| ||
|
|
How do I monitor user account creation in AD?
I need to accomplish the following:
Who created the user?What pri...
by
linuxprophet
New Member
in
Getting Data In
04-24-2012
|
0
|
5
| ||
|
|
I have some ftp log files that I am indexing and when I search, there will be events that have 275 lines in them inst...
by
shane_berry
Engager
in
Getting Data In
01-09-2015
|
0
|
1
| ||
|
What is the correct syntax to change Database Monitor (dbmon-tail) in setup.xml?
Example:
[dbmon-tail://MY_DB/m...
by
pedromvieira
Communicator
in
Getting Data In
01-09-2015
|
0
|
4
| ||
|
I am deploying universal forwarders with a bash script that is based on the sample script in http://docs.splunk.com/D...
by
will_paxata
Explorer
in
Getting Data In
01-12-2015
|
0
|
1
| ||
|
Hi,
I am new to Splunk. i was able to get data indexed for regular lg files., but we have some Ora audit XML files...
by
nir_sheep
New Member
in
Getting Data In
01-12-2015
|
0
|
2
| ||
|
|
I followed the tutorial very carefully on setting up the forwarder on my two Tomcat servers. Now I am trying to verif...
by
appzen
Path Finder
in
Getting Data In
01-09-2015
|
2
|
35
| ||
|
|
Yeah, I realize this is a really ridiculous question, but I just can't seem to find the answer -- which I assume is r...
by
proletariat99
Communicator
in
Getting Data In
01-09-2015
|
0
|
4
| ||
|
|
I have created and deployed the following serverclass.conf stanza:
[serverClass:dt-exdata] whitelist.0 = dt1exdata...
by
JoeSco27
Communicator
in
Getting Data In
01-12-2015
|
0
|
1
| ||
|
|
Does anyone out there use Splunk to collect Sonicwall Syslogs? We only have the 2GB splunk license and in hardly touc...
by
franklucas30
Engager
in
Getting Data In
12-11-2014
|
0
|
2
| ||
|
|
Hello, I have 1000s files that I am indexing but I only need first 3 fields to be indexed in each event, is there an ...
by
thiru25
Explorer
in
Getting Data In
12-11-2014
|
0
|
2
| ||
|
|
I have a scenario where in the splunk servers(Search Heads & Indexers) the server time is set as UTC
But when a us...
by
adityapavan18
Contributor
in
Getting Data In
01-12-2015
|
0
|
1
| ||
|
|
Hi folks. We are currently trying to pick up some log files by using a wildcard settings in our inputs.conf file. We ...
by
jrdba
Explorer
in
Getting Data In
12-31-2014
|
0
|
3
| ||
|
|
In SoS app, it is found that the indexing rate is limited to about 200Kb/s.
by
mwong
Splunk Employee
in
Getting Data In
01-11-2015
|
0
|
1
| ||
|
|
I installed the universal forwarder to my server, specified by sandbox host-url and port 9997 in the command "./splun...
by
appzen
Path Finder
in
Getting Data In
01-09-2015
|
0
|
3
| ||
|
|
I want to import a large set of files, one time, into a cluster. Reading the documentation here: http://docs.splunk.c...
by
jpincin
Engager
in
Getting Data In
01-09-2015
|
2
|
2
| ||
|
|
Hi, I am new to splunk and hence, just to experiment with the tool I added some bank statement data into splunk in th...
by
sushmitha_mj
Communicator
in
Getting Data In
01-09-2015
|
1
|
3
| ||
|
|
Currently using a pair of custom indexed fields for qualifying some of our data. For normal inputs this works great u...
by
mbarrie_splunk
Splunk Employee
in
Getting Data In
01-09-2015
|
0
|
1
| ||
|
|
I have been sending key value data like the following to Splunk:
metric1=1.0 metric2=22 metric3="Some string"
...
by
helge
Builder
in
Getting Data In
07-02-2014
|
0
|
8
| ||
|
Hi Guys
I have my Index archive data as per the below index config:
[default] frozenTimePeriodInSecs = 6289920...
by
AaronMoorcroft
Communicator
in
Getting Data In
01-09-2015
|
0
|
1
| ||
|
|
hi all,
I have installed a Universal Forwarder on a Domain controller (using domain creds - service account).
...
by
rb51
Explorer
in
Getting Data In
01-09-2015
|
0
|
1
| ||
|
Hi guys,
I've just installed the Universal Forwarder on my NAS server(Windows Server 2008 R2) and I have configure...
by
kendrickt
Path Finder
in
Getting Data In
01-08-2015
|
1
|
8
| ||
|
|
I am trying to parse a complicated log for malware data model.
I want to set a new field: action="allowed" or acti...
by
lukasz92
Communicator
in
Getting Data In
01-09-2015
|
0
|
1
| ||
|
|
Hi, splunk community.
I would like to detect regular activity with specific URL (or host) from HTTP Proxy logs. In...
by
souhei
Explorer
in
Getting Data In
01-08-2015
|
0
|
6
| ||
|
Hello, I am having an issue with the universal forwarder, where only one csv log gets sent to the index. We have mult...
by
RecoMark0
Path Finder
in
Getting Data In
01-07-2015
|
0
|
6
|
Get Started
Explore Essential Splunk Resources
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Get Expert Help at Community Office Hours
Join the #getting-data-in Slack channel
Become An Expert
Claim a $25 Cisco Store Gift Card
Help us improve the Splunk Community and complete our survey today!
Top Labels
-
add-on
2 -
administration
12 -
AIX
1 -
audit
1 -
blacklist
92 -
CLI
1 -
configuration
32 -
CSV
206 -
data
467 -
development
5 -
encryption
1 -
eval
2 -
field extraction
548 -
fields
5 -
forwarder
1 -
forwarder management
3 -
heavy
1 -
heavy forwarder
930 -
host
154 -
HTTP Event Collector
432 -
index
538 -
indexer
702 -
indexing performance
1 -
inputs.conf
826 -
installation
5 -
intermediate forwarder
140 -
introduction
3 -
JSON
387 -
kvstore
1 -
Linux
450 -
login
1 -
Mac
30 -
metadata
1 -
metrics
2 -
modular input
187 -
monitor
308 -
monitoring console
1 -
other
46 -
proactive Splunk component monitoring
2 -
props.conf
965 -
regex
5 -
saved search
2 -
scripted input
242 -
search
1 -
search head
2 -
source
290 -
sourcetype
489 -
Splunk Enterprise
1 -
Splunk Investigate
1 -
splunk-assist
2 -
subsearch
1 -
syslog
312 -
time
204 -
transforms.conf
571 -
troubleshooting
15 -
universal forwarder
1,539 -
using Enterprise Security
3 -
using Splunk Cloud
4 -
using Splunk Enterprise
16 -
whitelist
60 -
Windows
582 -
XML
90
- « Previous
- Next »
Get Updates on the Splunk Community!
Reduce and Transform Your Firewall Data with Splunk Data Management
Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...
Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...
If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...
Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions
Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...
